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5.2 POSSIBLE EVENTS 

The events provide a method to return parameters and data associated for 
each event. 

5,2.1 Inquiry Complete event 









Inquiry Complete 


0x01 


status, 

Num_Responses 



Description: 

The Inquiry Complete event indicates that the Inquiry is finished. This event 
contains a status parameter, which is used to indicate if the Inquiry completed 
successfully or if the Inquiry was not completed. In addition, the 
Num_Responses parameter contains the number of Bluetooth devices, which 
responded during the latest inquiry. 

Event Parameters: 



Status: 




Size: 1 Byte 






0x00 


Inquiry command completed successfully. 


Num_Responses: 


Size: 1 Byte 






OxXX 


Number of responses from the Inquiry. 
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5.2.2 Inquiry Result event 



Event: . 


;::Eyeni:Codei;': 




Inquiry Result 


0x02 


Num_Responses, 
BD_ADDR[i], 

Page_Scan_Repetition_Mode[i], 

Page_Scan_Period_Mode[i], 

Page_Scan_Mode[l], 

Class_of_Device[i] 

Clock_Offset[i] 



Description: 

The Inquiry Result event indicates that a Bluetooth device or multiple Bluetooth 
devices have responded so far during the current Inquiry process. This event 
will be sent from the Host Controller to the Host as soon as an Inquiry 
Response from a remote device is received if the remote device supports only 
mandatory paging scheme. The Host Controller may queue these Inquiry 
Responses and send multiple Bluetooth devices information in one Inquiry 
Result event. The event can be used to return one or more Inquiry responses 
in one event. This event contains the BD_ADDR, 

Page_Scan_Repetition_Mode, Page_Scan_Period_Mode, Page_Scan_Mode, 
Clock_Offset, and the Class of Device for each Bluetooth device that 
responded to the latest inquiry. 

Event Parameters: 



Num__Responses: Size: 1 Byte 







OxXX 


Number of responses from the Inquiry. 



BD^ADDRp]: Size: 6 Bytes * Num_Responses 



lvalue' 


parameter boscripU^ 




OxXXXXXXXXXX 
XX 


BD_ADDR for each device which responded. 
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Page_Scan_Repetition_Mode[i]: Size: 1 Byte* Num_Responses 







0x00 


RO 










0x02 


R2 






: : If^^^^i^iry^^i-i \ ■ : : '\ M i li ; ; ; ^ ;-! y ^ : : ;| .i i : ;> 




Page_Scan_Periocl_Mode[i]: 


Size: 1 Byte* Num^Responses 






0x00 


PO 




0x02 


P2 










Page_Scan_Mode[i]: 


Size: 1 Byte* Num_Respor)ses 






0x00 


Mandatory Page Scan Mode 




0x02 


Optional Page Scan Mode II 




0x04 - OxFF 


Reserved 




Class_ of_De vice[i]: 


Size: 3 Bytes * Num_Responses 






OxXXXXXX 


Class of Device for the device 



Clock_Offset[i]: Size: 2 Bytes * Num_Responses 







Bit 14.0 


Bit 16.2 of CLKslave-CLKmaster. 
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5.2.3 Connection CompI te vent 









Connection Complete 


0x03 


status, 

Connection_Handle, 
BD.ADDR, 
Ltnk_Type, 
Encryption_Mode 



Description: 

The Connection Complete event indicates to both of the Hosts forming the con- 
nection that a new connection has been established. This event also indicates 
to the Host, which issued the Create Connection, Add_SCO_Connection, or 
Accept_Connection_Request or Reject_Connection_Request command and 
then received a Command Status event, if the issued command failed or was 
successful. 

Event Parameters: 



Status: 


Size: 1 Byte 






0x00 


Connection successfully completed, 

Cp^iti$ici^ i^^^Xk^^^ for m pf Emr ; 


Connection^Handle: Size: 2 Bytes (12 Bits n^ieaningful) 






OxXXXX 


Connection Handle to be used to Identify a connection between to Blue- 
tooth devices. The Connection Handle is used as an identifier for transmit- 
ting and receiving voice or data. 

Range: OxOOOO-OxOEFF (OxOFOO - OxOFFF Reserved for future use) 



BD_ADDR: . Size: 6 Bytes 







OxXXXXXXXXXXXX 


BD_ADDR of the other connected Device forming the connection. 
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LinkJType: Size: 1 Byte 







0x00 


SCO connection (Voice Channels). 


0x01 

0x02-OxFF 


Reserved for Future Use. 


Encryption_Mode: Size: 1 Byte 


Value 




0x00 


Encryption disabled. 


0x02 


Encryption for both point-to-point and broadcast packets. 



1/ 
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Bluetooth. 



.event:. •::='•;•:!;=■ ii;^'-- '[ 


EyefltCckie j; 


•:^vent P.aramiB^^^^ 


Connection Request 


0x04 


BD_ADDR, 

Class_of_Device, 

Link_Type 



Description: 

The Connection Request event is used to indicate that a new incoming connec- 
tion is trying to be established. The connection may either be accepted or 
rejected. If this event is masked away and there is an incoming connection 
attempt and the Host Controller is not set to auto-accept this connection 
attempt, the Host Controller will automatically refuse the connection attempt. 
When the Host receives this event, it should respond with either an 
Accept_Connection_Request or Reject_Connection„Request command 
before the timer Conn_Accept_Timeout expires. 

Event Parameters: 



BD_ADDR: 


Size: 6 Bytes 






OxXXXXXXXXXXXX 


BD_ADDR of the device that requests the connection. 


Class_of_Device: 


Size: 3 Bytes 







OxXXXXXX 


Class of Device for the device, which request the connection. 


Link_ Type: 


Size: 1 Byte 









0x00 

i;oip>|i;j::|% 

0x02-0xFF 


SCO connection requested (Voice Channels). 

:con nect^n ; recjuested^^l^ harinfel!^. ; ^ ; 
Reserved for Future Use. 





Events 



29 November 1999 



711 



BLUETOOTH SPECIFICATION Version 1.0 B 



page 71 2 of 1082 



Host Controller Interface Functional Specification 
5.2.5 Disconnection CompI te event 









Disconnection Complete 


0x05 


Status, 

Connection_Handle, Reason 



Description: 

The Disconnection Complete event occurs when a connection is terminated. 
The status parameter Indicates if the disconnection was successful or not. The 
reason parameter indicates the reason for the disconnection if the disconnec- 
tion was successful. If the disconnection was not successful, the value of the 
reason parameter can be ignored by the Host. For example, this can be the 
case if the Host has issued the Disconnect command and there was a parame- 
ter error, or the command was not presently allowed, or a connection handle 
that didn't correspond to a connection was given. 

Note: When a physical link fails, one Disconnection Complete event will be 
returned for each logical channel on the physical link with the corresponding 
Connection handle as a parameter. 



Event Parameters: 



Status: 


Size: 1 Byte 






0x00 


Disconnection has occurred. 

■;;Eripr^Co^ 


Connection_Handle: Size: 2 Bytes (12 Bits meaningful) 




Parameter 


OxXXXX 


Connection Handle which was disconnected. 

Range: OxOOOO-OxOEFF (OxOFOO - OxOFFF Reserved for future use) 


Reason: 


Size: 1 Byte 






0x08. 0x13- 
0x16, OxIA 


Connection Tinneout (0x08), Other End Ternninated Connection error 
codes (0x13-0x15), Connection Terminated by Local Host (0x16), and 
Unsupported Rennote Feature en^or code (OxIA). See Table 6.1 on page 
745 for list of Error Codes. 
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5.2.6 Authentication Complete event 









Authentication Complete 


0x06 


status, Connectlon_Handle 



Description: 

The Authentication Complete event occurs when authentication has been com- 
I pleted for the specified connection. The Connection_Handle must be a 



I Connection_Handle for an ACL connection. 
Event Parameters; 



Status: 


Size: 1 Byte 






0x00 


Authentication Request successfully completed. 


Connection_Handle: Size: 2 Bytes (12 Bits meaningful) 






OxXXXX 


Connection Handle for which Authentication has been perfomned. 
Range: OxOOOO-OxOEFF (OxOFOO - OxOFFF Resen/ed for future use) 
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5.2,7 R mote Name Request CompI te ev nt 



Bluetooth. 









Remote Name Request Complete 


0x07 


Status, 

BD_ADDR, Remote_Name 



Description: 

The Remote Name Request Complete event is used to indicate that a remote 
name request has been completed. The Remote_Name event parameter is a 
UTF-8 encoded string with up to 248 bytes in length. The Remote_Name event 
parameter will be null-terminated (0x00) if the UTF-8 encoded string is less 
than 248 bytes. The BD_ADDR event parameter is used to identify which 
device the user-friendly name was obtained from. 

Note: the Remote_Name Parameter is received starting with the first byte of 
the name. This is an exception to the Little Endian order format for transmitting 
multi-byte parameters. 

Event Parameters: 



Status: 




Size: 1 Byte 






0x00 


Remote_Name_Request command succeeded. 


BD_ADDR: 




Size: 6 Bytes 






OxXXXXXXXXXXXX 


BD_ADDR for the device whose name was requested. 


Remote_Name: 


Size: 248 Bytes 







Name[248] 


A encoded user-friendly descriptive name for the remote device. 
A UTF-8 encoded name can be up to 248 bytes in length. If it is shorter 
than 248 bytes, the end is indicated by a NULL byte (0x00). 
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5.2,8 Encryption Change vent 









Encryption Change 


0x08 


Status, 

Connection_Handle, 
Encryption_Enabte 



Description: 

The Encryption Change event is used to indicate that the change in the encryp- 
tion has been completed for the Connection Handle specified by the 

IConnection_Handle event parameter. The Connection_Handle will be a 
Connection.Handle for an ACL connection. The Encryption„Enable event 
parameter specifies the new Encryption Enable for the Connection Handle 
specified by the Connection_Handle event parameter. This event will occur on 
both devices to notify both Hosts when Encryption has changed for the speci- 
fied Connection Handle between two devices. 



Event Parameters: 



Status: 


Size: 1 Byte 






0x00 


Encryption Change has occurred. 






Connection_Handle: Size: 2 Bytes (12 Bits meaningful) 






OxXXXX 


Connection Handle for which the link layer encryption has been enabled/ 
disabled for all Connection Handles with the same Bluetooth device end- 
point as the specified Connection Handle. 

Range: OxOOOO-OxOEFF (OxOFOO - OxOFFF Reserved for future use) 


Encryption_Enable: Size: 1 Byte 






0x00 


Link Level Encryption is OFF. 
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5.2.9 Change Conn ction Link K y CompI te vent 





iyjiyiehljC^ 


i JlSifeitt: ;|; iM j 


Change Connection Link Key Complete 


0x09 


status, Connection_Handle j 



Description: 

The Change Connection Link Key Complete event is used to indicate that the 
change in the Link Key for the Connection Handle specified by the 
Connection_Handle event parameter has been completed. 
The Connection_Handle will be a Connection_Handle for an ACL connection. 
The Change Connection Link Key Complete event is sent only to the Host 
which issued the Change_Connection_Unk_Key command. 



Event Parameters: 



Status: 


Size: 1 Byte 






0x00 


Change_Connection_Link_Key command succeeded. 


Connection_Handle: Size: 2 Bytes ( 1 2 Bits meaningful) 






OxXXXX 


Connection Handle which the Link Key has been change for all Connec- 
tion Handles with the same Bluetooth device end point as the specified 
Connection Handle. 

Range: OxOOOO-OxOEFF (OxOFOO - OxOFFF Reserved for future use) 



716 



29 November 1999 



Events 



BLUETOOTH SPECIFICATION Version 1.0 B 



page 717 of 1082 



Host Controller Interface Functional Specification 
5.2.10 Mast r Link Key Complete event 





li.gveiitCocie;:. 


'invent Parameters ;> 


Master Link Key Connplete 


OxOA 


Status, 

Connection_Handle, Key_Flag 



Description: 

The Master Link Key Complete event is used to indicate that the Link Key man- 
aged by the master of the piconet has been changed. The Connection_Handle 
will be a Connection_Handle for an ACL connection. The link key used for the 
connection will be the temporary link key of the master device or the semi- 
permanent link key indicated by the Key_Flag. The Key.Flag event parameter 
is used to indicate which Link Key (temporary link key of the Master, or the 
semi-pennanent link keys) is now being used in the piconet. 
Note: for a master, the change from a semi-permanent Link Key to temporary 
Link Key will affect all Connection Handles related to the piconet. For a slave, 
this change affects only this particular connection handle. A temporary link key 
must be used when both broadcast and point-to-point traffic shall be encrypted. 



Event Parameters: 



Status: 


Size: 1 Byte 




■ PiairBm^tAtp^ 


0x00 

loxSH;^^ 


IVjaster_Link_Key command succeeded. 
; Error Qof^^^^ 


Connection^Handle: Size: 2 Bytes ( 1 2 Bits meaningful) 


|ValU6:.:;i::::;/:":U: 


: Paiwneterbescrlptiohl^ lii-iM-W^ ;;v:d/::ii^" k 'h^ 


OxXXXX 


Connection Handle for which the Link Key has been changed for all 
devices in the same piconet. 

Range: OxOOOO-OxOEFF (OxOFOO - OxOFFF Reserved for future use) 


Key_Flag: 


Size: 1 Byte 


::Value':'''V "!.L.::;:^ 


'■parameter p^^ 


0x00 

;^qx01::v.:ipL ''- '[ ?\ 


Using Semi-permanent Link Key. 
::Using Temporary^ Link- Key,-:'.-i:P :;. 
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5.2,11 ReadR m te Support d Features CompI te vent 









Read Remote Supported 
Features Complete 


0x08 


Status, 

Connection_Handle, LMP_Features 



Description: 

The Read Remote Supported Features Complete event is used to indicate the 
completion of the process of the Link Manager obtaining the supported 
features of the remote Bluetooth device specified by the Connection_Handle 
event parameter. The Connection_Handle will be a Connection_Handle for an 
ACL connection. The event parameters include a list of LMP features. For 
details see "Link Manager Protocol" on page 185. 

Event Parameters: 



Status: 


Size: 1 Byte 






0x00 


Read_Remote_Supported_Features command succeeded. 

;^;:F^adiRei^^ 


Connection^Handle: Size: 2 Bytes (12 Bits meaningful) 






OxXXXX 


Connection Handle which is used for the 
Read_Remote_Supported_Features command. 

Range: OxOOOO-OxOEFF (OxOFOO - OxOFFF Reserved for future use) 


LMP_Features: Size: 8 Bytes 


;::Va!ue;j:;:^ 


iParsiiWete 


OxXXXXXXXX 
XXXXXXXX 


Bit Mask List of LMP features. See "Link Manager Protocol" on page 185. 
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5.2.12 Read Remote V rsion Information Complete event 





i: Event. 0*b'^^^^ 




Read Remote Version Information 
Complete 


OxOC 


Status. 

Connection_Handle, 
LMP_ Version, 
Manufacturer_Name, 
LMP_Subversion 



Description: 

The Read Remote Version Information Complete event is used to indicate the 
completion of the process of the Link Manager obtaining the version informa- 
tion of the remote Bluetooth device specified by the Connection_Handle event 
parameter. The Connection_Handle will be a Connection_Handle for an ACL 
connection. The LMP_Version event parameter defines the major hardware 
version of the Bluetooth hardware. This event parameter only changes when 
new versions of the Bluetooth hardware are produced for new Bluetooth SIG 
specifications; it is controlled by the SIG. The Manufacturer_Name event 
parameter indicates the manufacturer of the remote Bluetooth module. The 
LMP_ 

Subversion event parameter should be controlled by the manufacturer and 
should be changed as needed. The LMP^Subversion event parameter defines 
the various revisions that each version of the Bluetooth hardware will go 
through as design processes change and errors are fixed. This allows the soft- 
ware to determine what Bluetooth hardware is being used and, if necessary, to 
work around various bugs in the hardware. 



Event Parameters: 



Status: 


Size: 1 Byte 






0x00 


Read_Remote_Version_lnfonmation command succeeded. 




?ipage:74^=f6r:tist:dfETO '■'W^'iyii'^ 


Connection^Handle: Size: 2 Bytes (12 Bits meaningful) 






OxXXXX 


Connection Handle which is used for the 
Read_Remote_Version_lnfonnation command. 

Range: OxOOOO-OxOEFF (OxOFOO - OxOFFF Reserved fbr future use) 



Events 



29 November 1999 



719 



I 

BLUETOOTH SPECIFICATION Version 1.0 B page 720 of 1082 

Host Controller Interface Functional Specification RlllPtnilth I 



LMP_Version: Size: 1 Byte 





1 \ m 




OxXX 


Version of the Current LMP in the remote Bluetooth Hardware, 
see fable 5.2 on page 231 in the Link Manager Protocol for assigned val- 
ues (VersNr). 


Manufacturer_Name: 




Size: 2 Bytes 








OxXXXX 


Manufacturer Name of the remote Bluetooth Hardware, 
see Table 5.2 on page 231 in the Link Manager Protocol for assigned val- 
ues (Compid). 


LMP_Subversion: 




Size: 2 Bytes 










OxXXXX 


Subversion of the Current LMP in the remote Bluetooth Hardware, see 
Table 5.2 on page 231 in the Link Manager Protocol for assigned values 
(SubVersNr). 
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5.2.13 QoS Setup Complete ev nt 





Event Cade.: .* 


event ;Paraitjeters';.-J^^ 


QoS Setup Complete 


OxOD 


Status, 

Connection_Handle, 
Flags, 

Service_Type, 

Token_Rate, 

Peak_Bandwidth, 

Latency, 

Delay_Variation 



Description: 

The QoS Setup Complete event is used to indicate the completion of the 
process of the Link Manager setting up QoS with the remote Bluetooth device 
specified by the Connection_Handle event parameter. The Connection_Handle 
will be a Connection.Handle for an ACL connection. For more detail see "Logi- 
cal Link Control and Adaptation Protocol Specification" on page 245. 

Event Parameters: 



Status: 




Size: 1 Byte 






0x00 

};QxPil.H))cFFh; 


QoS_Setup command succeeded. 


Connection^Handle: 


Size: 2 Bytes (12 Bits meaningful) 


.yaiuolii:::-;; ' 






OxXXXX 


Connection Handle which is used for the QoS_Setup command. 
Range: OxOOOO-OxOEFF (OxOFOO - OxOFFF Reserved for future use) 


Flags: 




Size: 1 Byte 




i Pai^eterDe^^ 




0x00 - OxFF 


Resen/ed for Future Use. 
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Service^ Type: Size: 1 Byte 







0x00 


No Traffic Available. 










0x02 


Guaranteed Available. 




Token_Rate: 




Size: 4 Bytes 






OxXXXXXXXX 


Available Token Rate, in bytes per second. 


Peak_Bandwidth: 


Size: 4 Bytes 






OxXXXXXXXX 


Available Peak Bandwidth, in bytes per second. 


Latency: 




Size: 4 Bytes 






OxXXXXXXXX 


Available Latency, in microseconds: 


Delay _ Variation: 


Size: 4 Bytes 






OxXXXXXXXX 


Available Delay Variation, in microseconds. 
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5.2.14 Command Complete event 





: Event Cbtle 


VEvent f^arameters-.:- 


Command Complete 


OxOE 


Num_HCI_Command_Packets, 
Command_Opcode, Return_Parameters 



Description: 

The Command Complete event is used by the Host Controller for most com- 
mands to transmit return status of a command and the other event parameters 
that are specified for the issued HCI command. 



The Num_HCLCommand_Packets event parameter allows the Host Controller 
to indicate the number of HCI command packets the Host can send to the Host 
Controller. If the Host Controller requires the Host to stop sending commands, 
the Num_HCI_Command_Packets event parameter will be set to zero. To indi- 
cate to the Host that the Host Controller is ready to receive HCI command 
packets, the Host Controller generates a Command Complete event with the 
Command_Opcode 0x0000, and the Num_HCLCommand_Packets event 
parameter is set to 1 or more. Command_Opcode, 0x0000 is a NOP (No Oper- 
ation), and can be used to change the number of outstanding HCI command 
packets that the Host can send before waiting. See each command for the 
parameters that are retumed by this event. 

Event Parameters: 



Num^HCLCommand^Packets: Size: 1 Byte 





.P^rctjiiiet^riPescn 


N = OxXX 


The Number of HCI command packets which are allowed to be sent to the 
Host Controller from the Host. 

Range for N: 0-255 


Commar)d_Opcode: Size: 2 Bytes 








OxXXXX 


Opcode of the command which caused this event. 


Return_Parameter(s): Size: Depends on Command 




Paraiiniete^ ^-'-^^^V 


OxXX 


This is the return parameter(s) for the command specified in the 
Command_Opcode event parameter. See each command's definition for 
the list of return parameters associated with that command. 
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5.2.15 Command Status event 









Comnnand Status 


OxOF 


Status, 

N um_ H CLComma nd_ Packets, 
Command„Opcode 



Description: 

The Command Status event is used to indicate that the command described by 
the Command_Opcode parameter has been received, and that the Host Control- 
ler is currently performing the task for this command. This event is needed to 
provide mechanisms for asynchronous operation, which makes it possible to pre- 
vent the Host from waiting for a command to finish. If the command can not 
begin to execute (a parameter error may have occurred, or the command may 
currently not be allowed), the Status event parameter will contain the cone- 
sponding error code, and no complete event will follow since the command was 
not started. The Num_HCLCommand_Packets event parameter allows the Host 
Controller to indicate the number of HCI command packets the Host can send to 
the Host Controller. If the Host Controller requires the Host to stop sending com- 
mands, the Num_HCLCommand_Packets event parameter will be set to zero. 
To indicate to the Host that the Host Controller is ready to receive HCI command 
packets, the Host Controller generates a Command Status event with Status 
0x00 and Command_Opcode 0x0000, and the Num_HCI_Command_Packets 
event parameter is set to 1 or more. Command_Opcode, 0x0000 is a NOP (No 
operation) and can be used to change the number of outstanding HCI command 
packets that the Host can send before waiting. 



Event Parameters: 



Status: 


Size: 1 Byte 






0x00 


Command currently in pending. 

! i'iS6mit^ lifaii'^Si ^ S^e itable M -drilpaig© iter; iiist: icrf l^^^li^^r:] ;i I 


Num_HCI_Command_Packets: Size: 1 Byte 






N = OxXX 


The Number of HCI command packets which are allowed to be sent to the 
Host Controller from the Host. 
Range for N: 0 - 255 


Command^Opcode: Size: 2 Bytes 






OxXXXX 


Opcode of the comnnand which caused this event and is pending completion. 
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5.2.16 Hardware Error ev nt 



Bluetooth. 



Event . *::::•"'••-:!; 


ii.EyeWtCbde';; 


i ^veh tPar aiSieW^ 


Hardware Error 


0x10 


Hardware_Code 



Description: 

The Hardware Error event is used to indicate some type of hardware failure for 
the Bluetooth device. This event is used to notify the Host that a hardware 
failure has occurred in the Bluetooth module. 



Event Parameters: 

Hardware_Code: Size: 1 Byte 







0x00 


These Hardware_Codes will be implementation-specific, and wilt be 
assigned to indicate various hardware problems. 
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5.2,17 Flush Occurred event 

















Flush Occurred 


0x11 


Connection_Handle 



Description: 

The Flush Occurred event is used to indicate that, for the specified Connection 
Handle, the current user data to be transmitted has been removed. The 
Connection_Handle will be a Connection_Handle for an ACL connection. This 
could result from the flush command, or be due to the automatic flush. Multiple 
blocks of an L2CAP packet could have been pending in the Host Controller. If 
one baseband packet part of an L2CAP packet is flushed, then the rest of the 
HCI data packets for the L2CAP packet must also be flushed. 

Event Parameters: 



Connection^Handle: Size: 2 Bytes ( 1 2 Bits meaningful) 



Valtie::;;.; 






OxXXXX 


Connection Handle which was flushed. 

Range: OxOOOO-OxOEFF (OxOFOO - OxOFFF Reserved for future use) 
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5.2.18 Role Change event 





; Event Cbder' 




Role Change 


0x12 


Status, 

BD_ADDR, New_Role 



Description: 

The Role Change event is used to indicate that the current Bluetooth role 
related to the particular connection has changed. This event only occurs when 
both the remote and local Bluetooth devices have completed their role change 
for the Bluetooth device associated with the BD.ADDR event parameter. This 
event allows both affected Hosts to be notified when the Role has been 
changed. 

Event Parameters: 



Status: 




Size: 1 Byte 






0x00 


Role change has occurred. 


BD_ADDR: 




Size: 6 Bytes 


Value 


i Parameter DNascifl^ 


OxXXXXXXXXXXXX 


BD_ADDR of the Device for which a role change has completed. 


New^Role: 




Size: 1 Byte 






0x00 

•|.:b|bi; :;; J = 


Cun-ently the Master for specified BD.ADDR. 
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5.2,19 Number Of Complet d Packets event 









Number Of Completed Packets 


0x13 


Number_of_Handles, 

Connection_Handle[i], 

HC„Num_Of_CompIeted_Packets[i] 



Description: 

The Number Of Completed Packets event is used by the Host Controller to 
indicate to the Host how many HCI Data Packets have been completed 
(transmitted or flushed) for each Connection Handle since the previous 
Number Of Completed Packets event was sent to the Host. This means that 
the corresponding buffer space has been freed in the Host Controller. Based 
on this information, and the HC_TotaLNum_ACL_Data_Packets and 
HC_TotaL 

Num_SCO_Data_Packets return parameter of the Read_Buffer_Size 
command, the Host can determine for which Connection Handles the following 
HCI Data Packets should be sent to the Host Controller.The Number Of 
Completed Packets event must not be sent before the corresponding Connec- 
tion Complete event. While the Host Controller has HCI data packets in Its 
buffer, it must keep sending the Number Of Completed Packets event to the 
Host at least periodically, until it finally reports that all the pending ACL Data 
Packets have been transmitted or flushed. The rate with which this event is 
sent is manufacturer specific. 

Note that Number Of Completed Packets events will not report on SCO con- 
nection handles if SCO Flow Control is disabled. (See Read/ 
Write_SCO_Flow_ControLEnable on page 658 and page 659.) 

Event Parameters: 



Number_of_Handles: Size: 1 Byte 







OxXX 


The number of Connection Handles and Num_HCLData_Packets 
parameters pairs contained In this event. 

Range: 0-255 


Connection_Handle[i]:Size: Number_oLHandles * 2 Bytes(12 Bits meaningful) 






OxXXXX 


Connection Handle. 

Range: OxOOOO-OxOEFF (OxOFOO - OxOFFF Resen/ed for future use) 
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HC_Num_Of_Completed_Packets [i]: Size: Number_of_Handles * 2 Bytes 



Vaiue* 










N = OxXXXX 


The number of HCI Data Packets that have been compi ted (transmitted 
or flushed) for the associated Connection Handle since the previous time 
the event was retumed. 
Range for N: OxOOOO-OxFFFF 
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5-2.20 Mode Change ev nt 







: i; i|\^^riitti,'P^ "|| 


Mode Change 


0x14 


status, 

Connection_Hand!e, 

Current_Mode, 

Interval 



Description: 

The Mode Change event is used to indicate when the device associated with 
the Connection Handle changes between Active, Hold. Sniff and Park mode. 
The Connection_Handle will be a Connection_Handle for an ACL connection. 
The Connection_Handle event parameter is used to indicate which connection 
the Mode Change event is for. The Current_Mode event parameter is used to 
indicate which state the connection is currently in. The Interval parameter is 
used to specify a time amount specific to each state. Each Host Controller that 
is associated with the Connection Handle which has changed Modes will send 
the Mode Change event to its Host. 

Event Parameters: 



Status: 


Size: 1 Byte 






0x00 


A Mode Change has occurred. 


Connection^Handle: Size: 2 Bytes( 12 Bits meaningful) 






OxXXXX 


Connection Handle. 

Range: OxOOOO-OxOEFF (OxOFOO - OxOFFF Reserved for future use) 
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Bluetooth. 



Current__Mocle. 




Size: 1 Byte 


ydfue . 


I.Parameier Desert^ ■ " * ; • . f{f\ ^-irP^f; 


0x00 


Activ Mode. 




:dxp1 = -\;:i 


•:Holcj:Mode;*; !:■ . :^ |: 'Wf}''y '['■ 




0x02 


Sniff Mode, 






..Park\MOde;-:. i,,y^ i''^: ^'/y^^ 




0x04-0xFF 


Reserved for future use. 




Interval: 




Size: 2 Bytes 



Value 



Plirameter;Descrlptt0ri: 



N = OxXXXX 



Hold: 

Number of Baseband slots to wait in Hold Mode. 
Hold Interval = N * 0.625 msec (1 Baseband slot) 
Range for N: OxOOOO-OxFFFF 
Time Range: 0-40.9 sec 

Sniff: 

Number of Baseband slots between sniff intervals. 

Time between sniff intervals = 0.625 msec (1 Baseband slot) 

Range for N: OxOOOO-OxFFFF 

Time Range: 0-40.9 sec 



Park: 

Number of Baseband slots between consecutive beacons. 
Interval Length = N * 0.625 msec (1 Baseband slot) 
Range for N: OxOOOO-OxFFFF 
Time Range: 0-40.9 Seconds 
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Return Link Keys 


0x15 


Num_Keys, 

BD_ADDR [i], Link_Key[i] 



Description: 

The Return Link Keys event is used by the Host Controller to send the Host 
one or more stored Link Keys. Zero or more instances of this event will occur 
after the Read_Stored_Link_Key command. When there are no link keys 
stored, no Return Link Keys events will be returned. When there are link keys 
stored, the number of link keys returned in each Return Link Keys event is 
implementation specific. 

Event Parameters: 



Num^Keys: 




Size: 1 Byte 






OxXX 


Humbex of Link Keys contained in this event. 
Range: 0x01 - OxFF 


BD_ADDR[i]: 




Size: 6 Bytes * Num_Keys 


; ^ Sf'OM^M \ ; : i;.; i'i ; W: \M ; ^ i M \ \ ii ill W\ 




OxXXXXXXXXXXXX 


BD_ADDR for the associated Link Key. 


Link_Key[i]: 




Size: 16 Bytes * Num_Keys 







OxXXXXXXXXXX 

xxxxxxxxxxx 
xxxxxxxxxxx 


Link Key for the associated BD_ADDR. 
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5.2.22 PIN Code Request event 



"Event : i'l^' ':':■*:* ] K ;* * -l'^ 


Event Code 




PIN Code Request 


0x16 


BD.ADDR 



Description: 

The PIN Code Request event is used to indicate that a PIN code is required to 
create a new link key. The Host must respond using either the PIN Code 
Request Reply or the PIN Code Request Negative Reply command, depending 
on whether the Host can provide the Host Controller with a PIN code or not. 
Note: If the PIN Code Request event is masked away, then the Host Controller 
will assume that the Host has no PIN Code. 



When the Host Controller generates a PIN Code Request event in order for the 
local Link Manager to respond to the request from the remote Link Manager 
(as a result of a Create_Connection or Authentication_Requested command 
from the remote Host), the local Host must respond with either a 
PIN_Code_Request_Reply or PIN_Code_Request_ Negative. Reply com- 
mand before the remote Link Manager detects LMP response timeout. (See 
"Link Manager Protocor' on page 185.) 

Event Parameters: 



BD_ADDR: Size: 6 Bytes 









OxXXXXXXXXXXXX 


BD_ADDR of the Device which a new link key is being created for. 
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5,2,23 Link Key Request event 









Link Key Request | 0x17 


BD_ADDR 



Description: 

The Link Key Request event is used to indicate that a Link Key is required for 
the connection with the device specified in BD_ADDR. If the Host has the 
requested stored Link Key, then the Host will pass the requested Key to the 
Host Controller using the Link_Key_Request_Reply Command. If the Host 
does not have the requested stored Link Key, then the Host will use the 
Link_Key_Request_Negative_Reply Command to indicate to the Host Control- 
ler that the Host does not have the requested key 

Note: If the Link Key Request event is masked away then the Host Controller 
will assume that the Host has no additional link keys. 

When the Host Controller generates a Link Key Request event in order for the 
local Link Manager to respond to the request from the remote Link Manager 
(as a result of a Create_Connection or Authentication_Requested command 
from the remote Host), the local Host must respond with either a 
Link_Key_Request_ Reply or Link_Key_Request_Negative_Reply command 
before the remote Link Manager detects LMP response timeout. (See "Link 
Manager Protocol" on page 185.) 

Event Parameters: 



BD^ADDR: Si ze: 6 Bytes 







OxXXXXXXXXXXXX 


BD_ADDR of the Device which a stored link key is being requested. 
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5.2.24 Link Key Notification event 



Bluetooth. 









Link Key Notification 


0x18 


BD_ADDR, Llnk_Key 



Description: 

The Link Key Notification event is used to indicate to the Host that a new Link 
Key has been created for the connection with the device specified in 
BD_ADDR. The Host can save this new Link Key in its own storage for future 
use. Also, the Host can decided to store the Link Key in the Host Controller's 
Link Key Storage by using the Write_Stored_Unk_Key command. 



Event Parameters: 




BD_ADDR: 


Size: 6 Bytes 


iVatue;.: 




OxXXXXXXXXXXXX 


BD_ADDR of the Device for whicli the new link key has been 
generated. 


Link_Key: 


Size: 16 Bytes 









OxXXXXXXXXXX 

xxxxxxxxxxx 
xxxxxxxxxxx 


Link Key for the associated BD_ADDR. 
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5.2.25 Loopback Command event 



: :'^&i(!thti^^^^^^^^^^ 1 ;|p W§M \ \ \ I U M III \ \ It 












Loopback Command 


0x19 


HCI_Command_Packet 



Description: 

When in Local Loopback mode, the Host Controller loops back commands and 
data to the Host. The Loopback Command event is used to loop back all com- 
mands that the Host sends to the Host Controller with some exceptions. See 
Section 4.10.1, "Read_Loopback_Mode," on page 696 for a description of 
which commands that are not looped back. The HCI_Command_Packet event 
parameter contains the entire HCI Command Packet including the header. 
Note: the event packet is limited to a maximum of 255 bytes in the payload; 
since an HCI Command Packet has 3 bytes of header data, only the first 252 
bytes of the command parameters will be returned. 

Event Parameters: 



HCLCommand_Packet: Size: Depends on Command 























OxXXXXXX 


HCI Command Packet, including header. 
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5.2.26 Data Buffer Overflow event 



Bluetooth. 







*^yeint;Ctid^ 




Data Buffer Overflow 


Ox1A 


Link_Type 



Description: 

This event is used to indicate that the Host Controller's data buffers have been 
overflowed. This can occur if the Host has sent more packets than allowed. 
The Link_Type parameter is used to indicate that the overflow was caused by 
ACL or SCO data. 



Event Parameters: 

Link_Type: 



Size: 1 Byte 











0x00 

0x02-0xFF 


SCO Buffer Overflow (Voice Channels). 
•vACU^iBi!^^^ 
Reserved for Future Use. 
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5.2.27 Max Slots Change vent 









Max Slots Change 


0x1 B 


Connection_Handle, 
LMP_Max_Slots 



Description: 



This event is used to notify the Host about the LMP_Max_Slots parameter 
when the value of this parameter changes. It will be sent each time the value of 
the LMP_Max_Slots parameter changes, as long as there is at least one 
connection to another device. The Connection_Handle will be a 
Connection_Handle for an ACL connection. 



Event Paranneters: 

Connection_Handle: Size: 2 Bytes ( 1 2 Bits meaningful) 







OxXXXX 


Connection Handle, 

Range: OxOOOO-OxOEFF (OxOFOO - OxOFFF Reserved for future use) 


LMP_Max_Slots. 


Size: 1 byte 






OxXX 


Maximunn number of slots allowed to use for baseband packets, see 
"Link Manager Protocol" on page 185. 
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5.2.28 Read Clock Offset Complete event 









Read Clock Offset Complete 


0x1 C 


Status, 

Connectlon_Handle, Clock_Offset 



Description: 

The Read Clock Offset Complete event is used to indicate the completion of 
the process of the Link Manager obtaining the Clock Offset information of the 
Bluetooth device specified by the Connection_Handle event parameter. The 
Connection_Handle will be a Connection„Handle for an ACL connection. 

Event Parameters: 



Status: 


Size: 1 Byte 






0x00 


Read_Clock_Offset command succeeded. 

Bb^^^ on page;745lfc^ ; 


Connection_Handle: Size: 2 Bytes (12 bits meaningful) 






OxXXXX 


Specifies which Connection Handle's Clock Offset parameter is returned. 
Range: OxOOOO-OxOEFF (OxOFOO - OxOFFF Reserved for future use) 



Clock_Offset: Size: 2 Bytes 







Bit 14.0 


Bit 16.2 of CLKslave-CLKmaster 

'::Re$eryed./i:::> :M^:i-.:S'yi::^.'^r ^•'■::'^,-j:>^y:^^ : :-yvr':^v'l 
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5.2,29 Connection Packet Type Changed ev nt 



. ^ Wi^} \ i M \ ; ; itlSi: ■• ^ ^ III 1 Hi; I ' 1 






Connection Packet Type Changed 


0x1 D 


Status, 

Connection_Handte. Packet_Type 



Description: 

The Connection Packet Type Changed event is used to indicate that the pro- 
cess has completed of the Link Manager changing which packet types can be 
used for the connection. This allows current connections to be dynamically 
modified to support different types of user data. The Packet_Type event 
parameter specifies which packet types the Link Manager can use for the con- 
nection identified by the Connection_Handle event parameter for sending 
L2CAP data or voice. The Packet_Type event parameter does not decide 
which packet types the LM is allowed to use for sending LMP PDUs. 

Event Parameters: 



Status: Size: 1 Byte 







0x00 


Connection Packet Type changed successfully 



Connection_Handle: Size: 2 Bytes (1 2 Bits meaningful) 







OxXXXX 


Connection Handle, 




Range: OxOOOO-OxOEFF (OxOFOO - OxOFFF Reserved for future use) 


PacketJType: 


Size: 2 Bytes 


For A CL_Unk_ Type 






0x0001 


Reserved for future use. 




:;^:R^erve|fe :;!!; -i:^ llll;ll|:^''!l;llh WM\^}^^:v^''-'^Wk: :M 


0x0004 


Reserved for future use. 


0x0010 


DH1 

IR^er^iy^^^ l;niil|llil:;:]S^yil:^^ 


0x0040 


Reserved for future use. 
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0x0100 


R served for future use. 






0x0400 


DM3 






0x1000 


Reserved for future use. 






0x4000 


DM5 


:px8pO0' ;^;<i: f\ 




For SCO_Unk_Type 


yiiiuB v. - . 




0x0001 


Reserved for future use. 




t:Re^e|rS^^if<^:fut^ xrii; - y'v\y¥y:-iM%3M^^^^ 


0x0004 


Reserved for future use. 






0x0010 


Reserved for future use. 






0x0040 


HV2 


6x0080 'y 


Wh ' . ': - V ■ ' ' '■■'"y. [T-'^'-- ' " ]y'\ 


0x0100 


Reserved for future use. 






0x0400 


Reserved for future use. 






0x1000 


Reserved for future use. 


=Px2qf^;;:;ii;=" 

0x4000 


::Re#iBrVed:f6r^futu^^ ; ii^''^^^^}^^^^ 
Reserved for future use. 


■OxBOOO }j{yv^^^ 
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5.2.30 QoS Violation event 











QoS Violation 


0x1 E 


Connection_Handle 



Description: 

The QoS Violation event is used to indicate the Link Manager is unable to pro- 
vide the current QoS requirement for the Connection Handle. This event indi- 
cates that the Link Manager is unable to provide one or more of the agreed 
QoS parameters. The Host chooses what action should be done. The Host can 
reissue QoS.Setup command to renegotiate the QoS setting for Connection 
Handle. The Connection_Handle will be a Connection_Handle for an ACL con- 
nection. 



Event Parameters: 

Connection^Handle: Size: 2 Bytes (12 Bits meaningful) 











OxXXXX 


Connection Handle that the LM is unable to provide the current QoS 
requested for. 

Range: OxOOOO-OxOEFF (OxOFOO - OxOFFF Reserved for future use) 



Bluetooth. 
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riEyenttiCdde .: 




Page Scan Mode Change 


0x1 F 


BD_ADDR, Page_Scan_Mode 



Description: 

The Page Scan Mode Change event indicates that the remote Bluetooth 
device with the specified BD_ADDR has successfully changed the 
Page_Scan_Mode. 



Event Parameters: 

BD ADDR: 



Size: 6 Bytes 









OxXXXXXXXX 

xxxx 


BD_ADDR of the remote device. 



Page_Scan_Mode: 



Size: 1 Byte 







0x00 


Mandatory Page Scan Mode. 






0x02 


Optional Page Scan Mode II. 






0x04 - OxFF 


Reserved. 
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5.2.32 Page Scan Repetition Mode Change event 



Bluetooth. 





:iEv6:nt;'!::;:;:::>::; 




Page Scan Repetition Mode Change 


0x20 


BD_ADDR, 

Page_Scan_Repetition_Mode 



Description: 

The Page Scan Repetition Mode Change event indicates that the remote 
Bluetooth device with the specified BD_ADDR has successfully changed the 
Page_Scan_Repetitlon_Mode (SR). 



Event Parameters: 

BD ADDR: 



Size: 6 Bytes 













OxXXXXXXXX 

xxxx 


BD_ADDR of the remote device. 



Page_Scan_Repetition_Mode: 



Size: 1 Byte 







0x00 


RO 


0x02 


R2 




liijReseiye^ 
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6 LIST OF ERROR CODES 



6.1 LIST OF ERROR CODES 

This section of the document lists the various possible error codes. When a 
command fails, Error codes are returned to indicate the reason for the error. 
Error codes have a size of one byte, and the possible range of failure codes 
is 0x01 -OxFF. Section 6.2 provides an error code usage description for each 
error code. 







0x01 


Unknown HCI Command. 






0x03 


Hardware Failure. 


■.:px04:;i!;-i;;;;h^^ 




0x05 


Authentication Failure. 






0x07 


Memory Full. 


■■^^ 




0x09 


Max Number Of Connections. 


..:0X0A;:;:;: 

OxOB 


ACL connection already exists. 




i^Corwjarid' Disallow 


OxOD 


Host Rejected due to limited resources. 




^Ho$t'R^je<^^d^ b;^ecurityye^^^ 


OxOF 


Host Rejected due to remote device is only a personal device. 






0x11 


Unsupported Feature or Parameter Value. 


=^^ox\2::::::;.:i:; 'y^: ■ 




0x13 


Other End Temninated Connection: User Ended Connection. 






0x15 


other End Terminated Connection: About to Power Off. 








Repeated Attempts. 
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0x18 


Pairing Not Allowed. 


W&- Si ill 




0x1 A 


Unsupported Remote Feature. 


0x1 C 


SCO Interval Rejected. 


0x1 E 


Invalid LMP Parameters. 


0x20 


:::|inspec|iiil '^W\fM^-':MSw§^ 

Unsupported LMP Parameter Value. 


0x22 


LMP Response Timeout 


0x24 


LMP PDU Not Allowed 



Table 6. 1: List of Possible Error Codes 
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6.2 HCI ERROR CODE USAGE DESCRIPTIONS 

The purpose of this section is to give descriptions of how the error codes 
specified in Table 6.1 on page 745 should be used. It is beyond the scope of 
this document to give detailed descriptions of all situations where error codes 
can be used - especially as this may also, in certain cases, be implementation- 
dependent. However, some error codes that are to be used only in very special 
cases are described in more detail than other, more general, error codes. 

The following error codes are only used in LMP messages, and are therefore 
not described in this section: 

• Unknown LMP PDU (0x19) 

• SCO Offset Rejected (0x1 B) 

• SCO Interval Rejected (0x1 C) 

• SCO Air Mode Rejected (0x1 D) 

• Invalid LMP Parameters (0x1 E) 

Some of the following error code descriptions describe as implementation- 
dependent whether the error should be returned using a Command Status 
event or the event associated with the issued command (following a Command 
Status event with Status=OxOO). In these cases, the command can not start 
executing because of the error, and it is therefore recommended to use the 
Command Status event The reason for this suggested course of action is that 
it is not possible to use the Command Status event in all software architec- 
tures. 

6.3 UNKNOWN HCI COMMAND (0X01) 

The 'Unknown HCI Command' error code is returned by the Host Controller in 
the Status parameter in a Command Complete event or a Command Status 
event when the Host Controller receives an HCI Command Packet with an 
Opcode that it does not recognize. The OpCode given might not correspond to 
any of the OpCodes specified in this document, or any vendor-specific 
Opcodes, or the command may not have been implemented. If a Command 
Complete event is returned, the Status parameter is the only parameter con- 
tained in the Return„Parameters event parameter. Which of the two events is 
used is implementation-dependent. 
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6.4 NO CONNECTION (0X02) 

The 'No Connection' error code is returned by the Host Controller in the Status 
parameter in an event when the Host has issued a command which requires an 
existing connection and there is currently no connection corresponding to the 
specified Connection Handle or BD Address. If the issued command is a com- 
mand for which a Command Complete event should be returned, the event 
containing the error code is a Command Complete event. Otherwise, the event 
containing the error code is a Command Status event or the event associated 
with the issued command (following a Command Status event with 
Status=OxOO), depending on the implementation. 

6.5 HARDWARE FAILURE (0X03) 

The 'Hardware Failure' error code is returned by the Host Controller in the 
Status parameter in an event when the Host has issued a command and this 
command can not be executed because of a hardware failure. If the issued 
command is a command for which a Command Complete event should be 
returned, the event containing the error code is a Command Complete event. 
Otherwise, the event containing the error code is a Command Status event or 
the event associated with the issued command (following a Command Status 
event with Status=OxOO) depending on the implementation. 

6.6 PAGE TIMEOUT (0X04) 

The 'Page Timeout' error code is returned by the Host Controller in the Status 
parameter of the Connection Complete event when the Host has issued a 
Create_Connection command and the specified device to connect to does not 
respond to a page at baseband level before the page timer expires (a page tim- 
eout occurs). The error code can also be returned in the Status parameter of a 
Remote Name Request Complete event when the Host has issued a 
Remote_Name_Request command and a temporary connection needs to be 
established but a page timeout occurs. (The page timeout is set using the 
Write_Page_Timeout command.) 

6.7 AUTHENTICATION FAILED (0X05) 

The 'Authentication Failed' error code is returned by the Host Controller in the 
Status parameter in a Connection Complete event or Authentication Complete 
event when pairing or authentication fails due to incorrect results in the pairing/ 
authentication calculations (because of incorrect PIN code or link key). 

6.8 KEY MISSING (0X06) 

The 'Key Missing' error code is returned by the Host Controller in the Status 
parameter in a Connection Complete event or Authentication Complete event 
when pairing fails because of missing PIN code(s). 
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6.9 MEMORY FULL (0X07) 

The 'Memory Full' error code is returned by the Host Controller in the Status 
parameter in a Command Complete event when the Host has issued a com- 
mand that requires the Host Controller to store new parameters and the Host 
Controller does not have memory capacity for this. This may be the case after 
the Set_Event_Filter command has been issued. Note that for the 
Write_Stored„Link_Key command, no error is returned when the Host Control- 
ler can not store any more link keys. The Host Controller stores as many link 
keys as there is free memory to store in, and the Host is notified of how many 
link keys were successfully stored. 



6.10 CONNECTION TIMEOUT (0X08) 

Note: this error code is used to indicate a reason for disconnection. It is nor- 
mally returned in the Reason parameter of a Disconnection Complete event. It 
is therefore called reason code in the following description. 

The 'Connection Timeout' reason code is sent by the Host Controller in an 
event when the link supervision timer (see "Baseband Timers" on page 993) 
expires and the link therefore is considered to be lost. The link supervision tim- 
eout is set using Write_Link„Supervision„Timedut. The event that returns this 
reason code will most often be a Disconnection Complete event (in the Reason 
parameter). The event will be returned on both sides of the connection, where 
one Disconnection Complete event will be sent from the Host Controller to the 
Host for each Connection Handle that exists for the physical link to the other 
device. 

(It is possible for a link loss to be detected during connection set up, in which 
case the reason code would be returned in a Connection Complete event.) 



6.11 MAX NUMBER OF CONNECTIONS (0X09) 

The 'Max Number Of Connections' error code is returned by the Host Control- 
ler in the Status parameter of a Command Status event, a Connection Com- 
plete event or a Remote Name Request Complete event when the Bluetooth 
module can not establish any more connections. It is implementation specific 
whether the error is returned in a Command Status event or the event following 
the Command Status event (where Status=OxOO in the Command Status 
event). The reason for this error may be hardware or firmware limitations. 
Before the error is returned, the Host has issued a Create_Connection, 
Add_SCO_Connection or Remote_Name_Request command. The error can 
be returned in a Remote Name Request Complete event when a temporary 
connection needs to be established to request the name. 
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6.12 MAX NUMBER OF SCO CONNECTIONS TO A DEVICE 
(OXOA) 

The 'Max Number Of SCO Connections To A Device' error code is returned by 
the Host Controller in the Status parameter of a Command Status event or a 
Connection Complete event (following a Command Status event with 
Status=OxOO) when the maximum number of SCO connections to a device has 
been reached. Which of the two events that is used depends on the implemen- 
tation. The device is a device that has been specified in a previously issued 
Add_SCO_Connection command. 

6.13 ACL CONNECTION ALREADY EXISTS (OXOB) 

The 'ACL connection already exists' error code is returned by the Host Control- 
ler in the Status parameter of a Command Status event or a Connection Com- 
plete event (following a Command Status event with Status=OxOO) when there 
already is one ACL connection to a device and the Host tries to establish 
another one using Create_Connection. Which of the two events that is used 
depends on the implementation. 

6.14 COMMAND DISALLOWED (OXOC) 

The 'Command Disallowed' error code is returned by the Host Controller in the 
Status parameter in a Command Complete event or a Command Status event 
when the Host Controller is in a state where it is only prepared to accept com- 
mands with certain OpCodes and the HCI Command Packet received does not 
contain any of these OpCodes. The Command Complete event should be used 
if the issued command is a command for which a Command Complete event 
should be returned. Otherwise, the Command Status event should be used. 
The Host Controller is not required to use the 'Unknown HCI Command' error 
code, since this may require unnecessary processing of the received (and cur- 
rently not allowed) OpCode. When to use the 'Command Disallowed' error 
code is mainly implementation-dependent. Certain implementations may, for 
example, only accept the appropriate HCI response commands after the Con- 
nection Request, Link Key Request or PIN Code Request events. 
Note: the Reset command should always be allowed. 

6.15 HOST REJECTED DUE TO ... (OXOD-OXOF) 

Note: these error codes are used to indicate a reason for rejecting an incoming 
connection. They are therefore called reason codes in the following descrip- 
tion. 

When a Connection Request event has been received by the Host and the 
Host rejects the incoming connection by issuing the Reject_Connection_ 
Request command, one of these reason codes is used as value for the Reason 
parameter. The issued reason code will be returned in the Status parameter of 
the Connection Complete event that will follow the Command Status event 
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(with Status=OxOO) returned by the Host Controller after the Reject. 
Connection_Request command has been issued. The reason code issued in 
the Reason parameter of the Reject_Connection_Request command will also 
be sent over the air, so that it is returned in a Connection Complete event on 
the initiating side. Before this, the initiating side has issued a Create. 
Connection command or Add_SCO_Connection command, and has received a 
Command Status event (with Status=OxOO). 

6.16 HOST TIMEOUT (0X10) 

Note: this error code is used to indicate a reason for rejecting an incoming con- 
nection. It is therefore called reason code in the following description. 

Assume that a Connection Request event has been received by the Host and 
that the Host does not issue the Accept_Connection_Request or Reject. 
Connection_Request command before the connection accept timer expires 
(the connection accept timeout is set using Write_Connection_Accept__ 
Timeout). In this case, the 'Host Timeout' reason code will be sent by the Host 
Controller in the Status parameter of a Connection Complete event. The rea- 
son code will also be sent over the air, so that it is returned in a Connection 
Complete event on the initiating side. The initiating side has before this issued 
a Create.Connection or Add_SCO_Connection command and has received a 
Command Status event (with Status=OxOO). 

6.17 UNSUPPORTED FEATURE OR PARAMETER VALUE 
(0X11) 

The 'Unsupported Feature or Parameter Value' error code is returned by the 
Host Controller in the Status parameter in an event when the Host Controller 
has received a command where one or more parameters have values that are 
not supported by the hardware (the parameters are, however, within the 
allowed parameter range specified in this document). If the issued command is 
a command for which a Command Complete event should be returned, the 
event containing the error code is a Command Complete event. Otherwise, the 
event containing the error code is a Command Status event or the event 
associated with the issued command (following a Command Status event with 
Status=OxOO) depending on the implementation. 

6.18 INVALID HCI COMMAND PARAMETERS (0X12) 

The 'Invalid HCI Command Parameters' error code is returned by the Host 
Controller in the Status parameter of an event when the total parameter length 
(or the value of one or more parameters in a received command) does not con- 
form to what is specified in this document. 

The error code can also be returned if a parameter value is currently not 
allowed although it is inside the allowed range for the parameter. One case is 
when a command requires a Connection Handle for an ACL connection but the 
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Bluetooth. 



Host has given a Connection Handle for an SCO connection as a parameter 
instead. Another case is when a link key, a PIN code or a reply to an incoming 
connection has been requested by the Host Controller by using an event but 
the Host replies using a response command with a BD_ADDR for which no 
request has been made. 

If the issued command is a command for which a Command Complete event 
should be returned, the event containing the error code is a Command Com- 
plete event. Othenvise, the event containing the error code is a Command Sta- 
tus event or the event associated with the issued command (following a 
Command Status event with Status=OxOO), depending on the implementation. 



6.19 OTHER END TERMINATED CONNECTION: ... (0X13-0X15) 



Note: these error codes are used to indicate a reason for disconnecting a con- 
nection. They are therefore called reason codes in the following description. 

When the Host issues the Disconnect command, one of these reason codes is 
used as value for the reason parameter. The 'Connection Temninated By Local 
Host' reason code will then be returned in the Reason parameter of the Discon- 
nection Complete event that will follow the Command Status event (with Sta- 
tus=OxOO) that is returned by the Host Controller after the Disconnect 
command has been issued. The reason code issued in the Reason parameter 
of the Disconnect command will also be sent over the air, so that it is returned 
in the Reason parameter of a Disconnection Complete event on the remote 



6.20 CONNECTION TERMINATED BY LOCAL HOST (0X16) 

See description in 6.19. This error code is called a reason code, since it is 
returned in the Reason parameter of a Disconnection Complete event. 

6.21 REPEATED ATTEMPTS (0X17) 

The 'Repeated Attempts' error code is returned by the Host Controller in the 
Status parameter in a Connection Complete event or Authentication Complete 
event when a device does not allow authentication or pairing because too little 
time has elapsed since an unsuccessful authentication or pairing attempt. See 
"Link Manager Protocol" on page 185 for a description of how repeated 
attempts work. 

6.22 PAIRING NOT ALLOWED (0X18) 

The 'Pairing Not Allowed' error code is returned by the Host Controller in the 
Status parameter in a Connection Complete event or Authentication Complete 
event when a device for some reason does not allow pairing. An example may 
be a PSTN adapter that only allows pairing during a certain time window after a 
button has been pressed on the adapter. 
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6.23 UNSUPPORTED REMOTE FEATURE (0X1A) 

The ^Unsupported Remote Feature' error code is returned by the Host Control- 
ler in the Status parameter of the event associated with the issued command 
when a remote device that has been specified in the command parameters 
does not support the feature associated with the issued command. The 
'Unsupported Remote Feature' error code can also be used as a value for the 
Reason parameter in the Disconnect command (as a reason code). The error 
code will then be sent over the air so that it is returned in the Reason parame- 
ter of a Disconnection Complete event on the remote side. In the Disconnec- 
tion Complete event following a Command Status event (where Status=OxOO) 
on the local side on which the Disconnect command has been issued, the Rea- 
son parameter will however contain the reason code 'Connection Terminated 
By Local Host'. (The 'Unsupported Remote Feature' error code is called 
'Unsupported LMP Feature' in the LMP specification, see "Link Manager Proto- 
cor on page 185.) 

6.24 UNSPECIFIED ERROR (0X1 F) 

The 'Unspecified error' error code is used when no other error code specified 
in this document is appropriate to use. 

6.25 UNSUPPORTED LMP PARAMETER VALUE (0X20) 

The 'Unsupported LMP Parameter Value' error code is returned by the Host 
Controller in the Status parameter of the event associated with the issued com- 
mand when a remote device that has been specified in the command parame- 
ters sent back an LMP message containing the LMP error code 0x20. 
'Unsupported parameter values' (see "Link Manager Protocol" on page 185). 

6.26 ROLE CHANGE NOT ALLOWED (0X21) 

The 'Role Change Not Allowed' error code is returned by the Host Controller in 
the Status parameter in a Connection Complete event or Role Change event 
when role change is not allowed. If the local Host issues the Switch.Role com- 
mand and the remote device rejects the role change, the en-or code will be 
returned in a Role Change event. If a connection fails because a device 
accepts an incoming ACL connection with a request for role change and the 
role change is rejected by the initiating device, the error code will be returned in 
a Connection Complete event on both sides. 

6.27 LMP RESPONSE TIMEOUT (0X22) 

The 'LMP Response Timeout' error code is returned by the Host Controller in 
the Status parameter in a Command Complete event or an event associated 
with the issued command following a Command Status event with Sta- 
tus=OxOO, when the remote device does not respond to the LMP PDUs from 



Ust of Error Codes 



29 November 1999 



753 



BLUETOOTH SPECIFICATION Version 10 B 



page 754 of 1082 



Host Controller Interface Functional Specification BlUBtOOtN 

the local device as a result of the issued command within LMP response time- 
out. (See "Link Manager Protocol" on page 185) 



6.28 LMP ERROR TRANSACTION COLLISION (0X23) 

The 'LMP Error Transaction Collision' error code is returned by the Host Con- 
troller in the Status parameter of the event associated with the issued com- 
mand when a remote device that has been specified in the command 
parameters sends back an LMP message containing the LMP error code 0x23, 
"LMP Error Transaction Collision" (see Tink Manager Protocol" on page 185). 



6.29 LMP PDU NOT ALLOWED (0X24) 

The 'LMP PDU Not Allowed' error code is returned by the Host Controller in the 
Status parameter of the event associated with the issued command when a 
remote device that fias been specified in the command parameters sends back 
an LMP message containing the LMP error code 0x24, "PDU Not Allowed" 
(see "Link Manager Protocol" on page 185). 
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7 LIST OF ACRONYMS AND ABBREVIATIONS 



afobrevlattoh '}^Z 


'iCpmpl^te'riame** ■; 


ACL 


Asynchronous Connection Less 


DH 


Data High rate 






DM 


Data Medium rate 


■but:,. 


^be^^ce:yjFK^e^:^le^^ : 'r-zi/^ ; ■ r " .* vi-.:;;iV\:-:|;;::.;i:h^^ 


DV 


Data Voice 


(3t^C; 


jiGWiieral tnqufry'-Access C(>de.'. " : 


HCI 


Host Controller Interface 


L2CAP: 


:Logibial Link Control and Adaptation: Pr^ . \ y - 


L_CH 


Loq\ca\ Channel 


LC 


Link Controller 




Link Manager 


LMP 


Link Manager Protocol 




Opcode :Corrihfiahd field . 


OGF 


OpCode Group Field 






RSSI 


Received Signal Strength Indication 




^^iSyhphrohous Cot 


TBD 


To Be Defined 


Ul 


User Isochronous 


USB 


Universal Serial Bus 



Table 7. 1: List of Acronyms and Abbreviations 
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1 OVERVIEW 



Bluetooth. 



This document discusses the requirements of the Universal Serial Bus (USB) 
interface for Bluetooth hardware. Readers should be familiar with USB, USB 
design issues, Advanced Configuration Power Interface (ACPI), the overall 
Bluetooth architecture, and the basics of the radio interface. 

The reader should also be familiar with the Bluetooth Host Controller Interface. 

Referring to Figure 1.1 below, notice that this document discusses the imple- 
mentation details of the two-way arrow labelled 'USB Function'. 



other Host Drivers 



RFBD (with Bluetooth HCI Library) 
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Figure 1. 1: The Figure illustrates the reiationship between the host and the Bluetooth Radio Module 

The USB hardware can be embodied in one of two ways: 

1 . As a USB dongle, and 

2. Integrated onto the motherboard of a notebook PC. 
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Bluetooth. 



Finally, for an overview of the connection that is established between two 
Bluetooth devices, reference Figure 1.2. below. 
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Figure 1.2: The figure illustrates tlie flow of data from one Bluetooth device to another 
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2 USB ENDPOINT EXPECTATIONS 



This section outlines specific USB endpoints that are required in order to func- 
tion properly with the host. This section assumes a basic familiarity with USB. 
The endpoint numbers (labelled 'Suggested Endpoint Address' below) may be 
dynamically recognized upon driver initialization - this depends on the imple- 
mentation. 



2.1 DESCRIPTOR OVERVIEW 

The USB device is expected to be a high-speed device. 

The firmware configuration consists of two interfaces. The first interface (inter- 
face zero) has no alternate settings and contains the bulk and interrupt end- 
points. The second interface (interface one) provides scalable isochronous 
bandwidth consumption. The second interface has four alternate settings that 
provide different consumption based on the required isochronous bandwidth. 
The default interface is empty so that the device is capable of scaling down to 
no isochronous bandwidth. 

An HCI frame - consisting of an HCI header and HCI data - should be con- 
tained in one USB transaction. A USB transaction is defined as one or more 
USB frames that contain the data from one 10 request. For example, an ACL 
data packet containing 256 bytes (both HCI header and HCI data) would be 
sent over the bulk endpoint in one 10 request. That 10 request will require four 
64-byte USB frames - and forms a transaction. 

The endpoints are spread across two interfaces so, when adjusting isochro- 
nous bandwidth consumption (via select interface calls), any pending bulk and/ 
I or interrupt transactions do not have to be terminated and resubmitted. 
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I The following table outlines the required configuration 
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The following two examples are used to demonstrate the flow of data given the 
describe endpoints. 
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2.2 CONTROL ENDPOINT EXPECTATIONS 

Endpoint 0 is used to configure and control the USB device. Endpoint 0 will 
also be used to allow the host to send HCI-specific commands to the host con- 
troller. When the USB firmware receives a packet over this endpoint that has 
the Bluetooth class code, it should treat the packet as an HCI command 
packet. 

2.3 BULK ENDPOINTS EXPECTATIONS 

Data integrity is a critical aspect for ACL data. This, in combination with band- 
width requirements, is the reason for using a bulk endpoint. Multiple 64-byte 
packets can be shipped, per millisecond, across the bus. 

Suggested bulk max packet size is 64 bytes. Bulk has the ability to transfer 
multiple 64-byte buffers per one millisecond frame, depending on available bus 
bandwidth. 

Bulk has the ability to detect errors and correct them. Data flowing through this 
pipe might be destined for several different slaves. In order to avoid starvation, 
a flow control model similar to the shared endpoint model is recommended for 
the host controller. 

2.4 INTERRUPT ENDPOINT EXPECTATIONS 

An interrupt endpoint is necessary to ensure that events are delivered in a pre- 
dictable and timely manner. Event packets can be sent across USB with a 
guaranteed latency. 

The interrupt endpoint should have an interval of 1 ms. 

The USB software and firmware requires no intimate knowledge of the events 
passed to the host controller. 
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2.5 ISOCHRONOUS ENDPOINTS EXPECTATIONS 

These isochronous endpoints transfer SCO data to and from the host controller 
of the radio. 

Time is the critical aspect for this type of data. The USB firmware should trans- 
fer the contents of the data to the host controllers' SCO FIFOs. If the FIFOs are 
full, the data should be overwritten with new data. 

These endpoints have a one (1) ms interval, as required by Chapter 9 of the 
USB Specification, Versions 1.0 and 1.1. 

The radio is capable of three (3) 64Kb/s voice channels (and can receive the 
data coded in different ways - 16-bit linear audio coding is the method that 
requires the most data). A suggested max packet size for this endpoint would 
be at least 64 bytes. (It is recommended that max packet sizes be on power of 
2 boundaries for optimum throughput.) However, if it is not necessary to sup- 
port three voice channels with 16-bit coding, 32 bytes could also be considered 
an acceptable max packet size. 
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3 CLASS CODE 



A class code will be used that is specific to all USB Bluetooth devices. This will 
allow the proper driver stack to load, regardless of which vendor built the 
device. It also allows HCI commands to be differentiated from USB commands 
across the control endpoint. 

The class code (bDeviceClass) is OxEO - Wireless Controller. 

The Subclass code (bDeviceSubClass) is 0x01 - RF Controller. 

The Protocol code (bDeviceProtocol) is 0x01 - Bluetooth programming. 
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4 DEVICE FIRMWARE UPGRADE 

Firmware upgrade capability is not a required feature. But if implemented, the 
firmware upgrade shall be compliant with the "Universal Serial Bus Device 
Class Specification for Device Firmware Upgrade" (version 1.0 dated May 13, 
1999) available on the USB Forum web site at http://www.usb.org. 
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5 LIMITATIONS 



5.1 POWER SPECIFIC LIMITATIONS 

Today, the host controller of USB-capable machines resides inside a chip 
known as PIIX4. Unfortunately, because of errata, the USB host controller will 
not receive power while the system is in S3 or S4. This means that a USB 
wake-up can only occur when the system is in S1 or S2. 

Another issue with the USB host controller is that, while a device is attached, it 
continually snoops memory to see if there is any work that needs to be done. 
The frequency that it checks memory is 1ms. This prevents the processor from 
dropping into a low power state known as C3. Because the notebook processor 
is not able to enter the 03 state, significant power loss will occur. This is a real 
issue for business users - as a typical business user will spend almost 90% of 
their time in the C3 state. 

5.2 OTHER LIMITATIONS 

Data corruption may occur across isochronous endpoints. Endpoints one and 
two may suffer from data corruption. 

USB provides 16-CRC on all data transfers. The USB has a bit error rate of 
10-^1 

Note that when a dongle is removed from the system, the radio will lose power 
(assuming this is a bus-powered device). This means that devices will lose 
connection. 
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1 GENERAL 



Bluetooth. 



The objective of the HCI RS232 Transport Layer is to make it possible to use 
the Bluetooth HCI over one physical RS232 interface between the Bluetooth 
Host and the Bluetooth Host Controller. 



Bluetooth 
Host 


Bluetooth HCI 


Bluetooth 
Host 

Controller 


^ — ► 



J 
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2 OVERVIEW 



Bluetooth. 



There are four kinds of HCI packets that can be sent via the RS232 Transport 
Layer; i.e. HCI Command Packet, HCI Event Packet, HCI ACL Data Packet 
and HCI SCO Data Packet (see "Host Controller Interface Functional Specifi- 
cation" on page 517). HCI Command Packets can only be sent to the Bluetooth 
Host Controller, HCI Event Packets can only be sent from the Bluetooth Host 
Controller, and HCI ACL/SCO Data Packets can be sent both to and from the 
Bluetooth Host Controller. 

However, HCI does not provide the ability to differentiate the four HCI packet 
types. Therefore, if the HCI packets are sent via a common physical interface, 
a HCI packet indicator has to be added according to the Table 2.1 below. 







HCI Command Packet 


0x01 






HCI SCO Data Packet 


0x03 


lHC?'Eve^ibPacket:::i-^^^^ 


V0>^04--"': ■>i;:^^^ iff-- 


Error Message Packet* 


0x05 


Negotiation Packet J,:- • 





Table 2. 1: HCI RS232 Packet Header 

In addition to those four HCI packet types, two additional packet types are 
introduced to support dynamic negotiation and error reporting. The Error Mes- 
sage Packet (0x05) is used by the receiver to report the nature of error to the 
transmitting side. The Negotiation Packet (0x06) is used to negotiate the com- 
munication settings and protocols. 

The HCI packet indicator shall be followed by an 8-bit sequence number that is 
incremented by 1 every time any of the above packets are sent, except when 
the retransmission packets are sent as a part of the error recovery. The HCI 
packet shall immediately follow the sequence number field. All four kinds of 
HCI packets have a length field, which is used to determine how many bytes 
are expected for the HCI packet. The Error Message Packet and Negotiation 
Packet are fixed-length packets, although the negotiation packet can be 
extended up to 7 more bytes, based on the number in the extension field. 



The frame of the basic RS232 Transport Packet is shown below. 
LSB 



MSB 



Packet 


SEQ 


Type 


No 


(8-bit) 


(8-blt) 



HCI Packet 

or Error Message/Negotiation Packet payload 



The least significant byte is transmitted first. 
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3 NEGOTIATION PROTOCOL 



Before sending any bytes over the RS232 link, the baud rate, parity type, num- 
ber of stop bit and protocol mode should be negotiated between the Host Con- 
troller and the Host. Tdetect is the maximum time required for the transmitter to 
detect the CTS state change, plus the time it takes to flush the transmit buffer if 
RTS/CTS is used for error indication and re-synchronization. Otherwise, Tde- 
tect represents the local-side interrupt latency. Host will first send a negotiation 
packet with the maximum suggested values, plus Host's Tdetect value with 
Ack code = 000b at the default UART settings specified below, using protocol 
mode = 0x13. At the same time, the Host Controller side also sets its UART 
settings to the same initiating parameters and waits for the negotiation packet 
from the Host. 

If the Host Controller side can accept the suggested values from the Host, it 
sends back the negotiation packet with the same UART setting values, plus 
Host Controller's Tdetect value with Ack code = 001b. Then, the Host sends 
back the negotiation packet with the same UART setting values, plus Host's 
Tdetect with Ack code = 001b as the final acknowledgment, and then sets its 
Host's UART to the new value. After it has received the final acknowledgment 
packet from the Host, the Host Controller also changes its UART setting to the 
new values. 

On the other hand, if the Host Controller side cannot accept the suggested 
value, it should send a set of new suggested values and its own Tdetect value 
with Ack code = 010b. Each side should continue these steps until both sides 
receive the accepted Ack code value. Error detection and error recovery during 
the initial negotiation are performed in the same manner as described in Sec- 
tion 5 on page 785 (Protocol Mode 0x13) 

The negotiation phase can be initiated again by either side at any time in order 
to renegotiate the new values, or just to inform the new Tdetect time. When the 
negotiation is reinitiated during the data transfer, it should use the previously 
negotiated settings to exchange the new parameters rather than using the 
default values. 

The initiating parameters: 
baud rate: 9600 bps 
parity type: no parity 

number of data bit: 8 (Note: Only 8-bit data length is allowed.) 
number of stop bit: 1 

protocol mode: 0x13 (HDLC like framing with COBS/CCITT-CRC) 
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The negotiation packet format: 

LSB 



Bluetooth. 



MSB 



Packet 
Type 
header 
0x06 
(8 bits) 



SEQ 


UART 


No 


Settings 


(8 


and ACK 


bits) 


(8 bits) 



Baud Rate 
(16 bits) 



Tdetect Time 
(16 bits) 



Protocol 
Mode 
(8 bit) 



SEQ No: 

This is an 8-bit number that is incremented by 1 each time a packet is transmit- 
ted, excluding the retransmission packet. The unsigned Little Endian format is 
used. 

UART Settings and ACK Field 







■:;Blt3 i;:;;! 


''Blt^^S^^ 


■iits-rt- 


Reserved 


stop bit 


Parity Enable 


Parity Type 


Ack Code 




(1 bit) 


(1 bit) 


(1 bit) 


(3 bits) 



Stop Bit: 

0: 1 stop bit 
1 : 2 stop bits 

Parity Enable: 

0: No parity 
1 : Parity 

Parity Type: 

0: Odd Parity 
1 : Even Parity 

Ack Code: 

000b: Request 
001 b: Accepted 

010b: Not accepted with new suggested values 
011b-111b: Reserved 



Baud Rate: 

N should be entered for baud rate where 
Baud rate = 27,648,000 / N 
N=0 is invalid 

Maximum possible rate is therefore 27.648Mbps 
Minimum possible rate is therefore 421 .88bps 
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The unsigned Little Endian format is used, and the least significant byte should 
be transmitted first. 



Tdetect Time: 

This 16-bit field should be filled with the maximum required time for the trans- 
mitter to detect the CTS change, plus the time it takes to flush the transmit 
FIFO if RTS and CTS are used for resynchronization. Otherwise, it should be 
filled with the local interrupt latency. 

The unit of time should be specified in 100 microseconds. 

The unsigned Little Endian format is used, and the least significant byte should 
be transmitted first. 



Protocol Mode 







■■Biti. - 












CRC Used 


Delimiter 
Used 


RTS /CTS 
used 


RTS/CTS 
Mode 


Error 

Recovery 
Used 


ExtO 


Ext1 


Ext2 



CRC Used: 

0: CRC-CCITT is not attached at the end of the packet. 

1 : CRC-CCITT is attached at the end of the packet. (Default) 

16-bit CRC can be used with either RTS/CTS or delimiters, although this spec- 
ification only describes a case when it is used with delimiters. 
Generator Polynomial = x^^+x^^+x^+1 

Delimiter Used: 

0: Delimiter, 0x7E, is not used. 

1: Delimiter, 0x7E, is used with COBS. (Default) 

RTS/CTS Used: 

0: RTS/CTS is not used. (Default) 
1: RTS/CTS is used. 

RTS/CTS Mode: 

0: RTS/CTS is used for Error indication and resynchronization. (Default) 
1: RTS/CTS is used for hardware flow control. Please refer to "HCI UART 
Transport Layer" on page 795 for details. 
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Error Recov ry Used: 

0: Error Recovery is not supported. 

Even if Error Recovery is not supported, Error Message has to be sent. 

1 : Error Recovery is supported. (Default) 

Error Recovery retransmits the packet with error and all subsequent 
packets if RTS/CTS are used for synchronization. On the other hand, if 
0x7E is used as a delimiter with COBS as a synchronization mechanism, 
then the error recovery retransmits only the packet with error Please 
refer to following sections for details. 

Ext2,Ext1,ExtO: 

These three bits indicate the number of extra bytes attached to the negotiation 
packet for future expansion. 
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4 PACKET TRANSFER PROTOCOL 



The packet can be transferred with parity enabled or disabled, and with or with- 
out CRC - depending on the environment - as a mechanism to detect the 
error. 

As a synchronization mechanism, one can select either RTS/CTS, or delimit- 
ers. Usage of RTS/CTS reduces the computation time for COBS encoding, but 
it requires two extra copper wires which may not be suitable in some applica- 
tions. If three-wire cable must be used, or programmable RTS and CTS are not 
available, delimiter, 0x7E, can be used with COBS. 

However, error recovery for these two alternatives may differ slightly. If the 
RTS/CTS is used for resynchronization, it would be simpler to retransmit all the 
packets, starting with the packet that had an error. If delimiters are used, the 
transmitter should retransmit only the packet with an error. The error recovery 
can be disabled, but the error message packet should still be sent to the trans- 
mitter side when the receiver side detects an error. 

The HCI RS232 transport layer always uses a data length of 8 bits, and this 
specification assumes the Little Endian format. Furthermore, the least signifi- 
cant byte should be transmitted first. 

The Host Controller may choose to support only one protocol mode, but the 
Host should be able to support any combination. 

Two common schemes (Protocol mode = 0x13 and 0x14) are defined in the fol- 
lowing sections to illustrate the usage of each mode. 
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5 USING DELIMITERS WITH COBS FOR 
SYNCHRONIZATION 



This section illustrates how delimiters with COBS are used for synchronization, 
and how error recovery procedure is performed if delimiters are used as a 
mechanism to synchronize. This is described using protocol mode 0x13. 

5.1 USING DELIMITERS WITH COBS AND CRC, PROTOCOL 
MODE 0X13 

In case RTS/CTS are not available, or if they are hard-wired to be used as a 
hardware flow control, the HDLC-like framing with the 16-bit CRC (CRC- 
CCITT) and delimiter 0x7E with COBS (Consistent Overhead Byte Stuffing) [2] 
are used as a means to detect an error and to resynchronize. 

The CRC-CCITT uses the following generator polynomial for 16-bit checksum: 

x''^+x''^+x^+1 . The 16-bit CRC should be attached to the end of the packet, but 
right before the ending delimiter, 0x7E. The beginning delimiter, 0x7E, should 
be followed by the packet type indicator field. 

The Consistent Overhead Byte Stuffing is a recent proposal to PPP that yields 
less than 0.5% overhead, regardless of the data pattern. It uses two steps to 
escape the delimiter. 0x7E. The first step is eliminating zeros and then replac- 
ing all 0x7E with 0x00 between the beginning and ending delimiters. 

A simple error recovery scheme is adapted here to minimize the overhead of 
supporting the error recovery. When the receiving end detects any error, it 
should send the error message packet with an error type back to the transmit- 
ting side. This error message packet will contain a Sequence Number with 
Error field (SEQ No with Error) indicating in which packet the error was 
detected. The Sequence Number field (SEQ No) that is on every packet is an 
8-bit field that is incremented by 1 each time any type of packet is transmitted, 
except for the retransmission packets. The retransmitted packets should con- 
tain the original sequence number in the SEQ No field. 

The transmitting side should retransmit only the HCI packets that had an error, 
which is indicated by the SEQ No with Error field. It is the responsibility of the 
receiving end to reorder the packets in the right order. If the transmitting side 
doesn't have the packet with the correct sequence number in the retransmis- 
sion holding buffer, it should send the error message packet with the Error 
Type equal to 0x81 and SEQ No with Error field with the missing sequence 
number for the retransmission packet, so that the receiving end can detect 
missing packets. In this case the full error recovery cannot be performed. How- 
ever, the receiving side can at least detect the loss of packets. 

The receiving side should wait at least 4 times the sum of remote Tdetect. local 
Tdetect and the transmission time of the error message packet, plus the 
retransmission packet, before it times out when it is waiting for the retransmis- 
sion packet. When it times out. the receiver has an option of re-requesting it by 
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Bluetooth. 



sending another error message packet with error type = 0x09, or simply drop- 
ping it and reporting it to the higher layer. 

5.2 FRAME FORMAT 

BOF(0x7E), CRC-CCITT, and EOF(0x7E) are added as shown below to those 
basic packets described in this document. When the CRC is transmitted, the 
least significant byte should be transmitted first. 



LSB 



MSB 



Ox7E I 

(8 bits) 



Packet 
Type 
(8 bits) 



SEQ No 
(8 bits) 



..Payload. 



{16bits) 



dx7E V 
EOF % 
(8 bits) 



5.3 ERROR MESSAGE PACKET 

The error-message packet format is the following: 
LSB 



MSB 



Pacltet Type, 0x05 


Sequence No 


Error Type 


SEQ No with Error 


(8-bit field) 


(8-bit fleid) 


(8-blt field) 


(8-bit field) 





i;piisci;r!i^t^ 


0x00 


Reserved 


0x02 


Parity Error 






0x04 


Framing Error 






0x08 


CRC Error 






0x0A-0x80 


Reserved 


0x82- OxFF 


|tV!ii|(i|i(g^ 
Reserved 



Table 5. 1: Error Type available 



786 



29 November 1999Using delimiters with COBS for synchronization 



BLUETOOTH SPECIFICATION Version 1.0 B 



page 787 of 1082 



HCI RS232 Transport Layer 

5.4 CONSISTENT OVERHEAD BYTE STUFFING 





■ Fdiibweid by' 




0x00 




Unused. 


: OXpl rOXCf .; I: 


. n- T aata pyje$ . • . . 


;:■ 1 ;ne:n;rT.pai3 pyies pius irnpnwii Uallll^ ■: 


OxDO 


n-1 data bytes 


The n-1 data bytes without trailing zero. 






■Unused. ' ■.'/^i '- ' -rl >y^ 


0xD2 




Reserved for future. 


OxpS-OxOF. •:. 


|ii||e|||i|||||||||i 


. A run of ifhOxDO 26^ 


OxEO-OxFE 


n-EO data bytes 


The data bytes with two trailing zeros. 


OxFF 




Unused. 



Table 5.2: 



The COBS requires two step encodes. 

The first step is the zero-elimination step. This step takes place after attaching 
the 16-bit CRC if CRC is enabled, but before adding the beginning and ending 
delimiters, 0x7E. Each COBS code block consists of the COBS code followed 
by zero or more data bytes. Code bytes 0x00, OxD1 , 0xD2 and OxFF are never 
used. The COBS zero-elimination procedure searches the packet for the first 
occurrence of value zero. To simplify the encoding, a zero is added temporarily 
at the end of the packet, after the CRC. as a temporary place holder. The num- 
ber of octets up to and including the first zero determines the code to be used. 
If this number is 207 or less, then the number itself is used as a COBS code 
byte, followed by the actual non-zero data bytes themselves, excluding the last 
byte, which is zero. On the other hand, if the number is more than 207. then the 
code byte OxDO is used, followed by the first 207 non-zero bytes. This process 
is repeated until all of the bytes of the packet, including the temporary place- 
holding zero at the end, have been encoded. If a pair of 0x00 is detected after 
0 to 30 non-zero octets, the count of octets plus OxEO is used as the COBS 
code, followed by the non-zero octets, excluding the pair of zeros. If a run of 
three to fifteen 0x00 octets are detected, then the count of these 0x00 octets, 
plus OxDO. is used as the code, followed by no other bytes. 

The second step is replacing 0x7E with 0x00. The two steps can be done 
together in a loop, to reduce the encoding time. 

For more details and a reference code, please refer to "PPP Consistent Over- 
head Byte Stuffing (COBS)" by J. Carlson et al [2]. 
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6 USING RTS/CTS FOR SYNCHRONIZATION 



This section illustrates how RTS and CTS are used to resynchronize, and how 
error-recovery procedure is performed if RTS and CTS are used as a mecha- 
nism to synchronize. This is described using protocol mode 0x14. 

6.1 USING RTS/CTS FOR SYNC WITHOUT CRC, PROTOCOL 
MODE 0X14 

The flow of HCI packet transfer is handled by two MODEM control/status sig- 
nals, -RTS and -CTS. -RTS and -CTS are connected in a null MODEM fashion, 
meaning that the local-side -RTS should be connected to the remote-side 
-CTS, and the local-side -CTS should be connected to the remote-side -RTS. 
These MODEM control/status signals are used to notify the detection of an 
error to the other side, as well as to resynchronize the beginning of the packet 
after an error is detected. A very simple error-recovery scheme is adapted here 
to minimize the overhead of supporting this. 

The HCI packet is transmitted only while CTS bit is 1 . If the CTS bit changes to 
0 during the HCI packet transfer or after the last byte is transmitted, this indi- 
cates that there was some error. The receiving end will deassert RTS as soon 
as it detects any error, and should send the error packet with an error type back 
to the transmission side. This error packet will contain a Sequence Number 
with Error field that indicates in which packet the error was detected. The 
sequence number field that is on every packet is an 8-bit field that is incre- 
mented by 1 each time any type of packet is transmitted, except for the retrans- 
mission packets. The retransmitted packets should contain the original 
sequence number in the SEQ No field. 

When the transmitting end detects CTS bit changing from 1 to 0 at any time, 
the transmitting end should hold the transmission and wait until the error 
packet is received before resuming the transmission. When the receiving end 
is ready to receive the new data, it should assert RTS after the minimum of 
Tdetect time. Tdetect time is the maximum time required for the transmit side 
to detect the state change on CTS bit, plus the time it takes to flush the transmit 
buffer. The Tdetect value of each side should be informed to the other side dur- 
ing the negotiation phase. The local Tdetect value and the remote side Tdetect 
value together, along with the baud rate, can also be used to estimate the 
queue length required for the retransmission holding buffer Before the receiv- 
ing side asserts RTS line again, it should flush the RX bufl'er. 

The transmission side should retransmit all of the HCI packets from the packet 
that had an error, which is indicated by SEQ No with Error field. Before it 
retransmits, it should flush the transmit buffer that may hold the leftover data 
from the aborted previous packet. As it retransmits the packets from the 
retransmission holding buffer, it should start transmitting the packet with the 
Sequence Number that matches the SEQ No with Error. If the transmitting side 
doesn't have the packet with the correct sequence number in the retransmis- 
sion holding buffer, the transmitter should send an error message packet with 
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error type 0x81 . and it should skip to the packet with the sequence number that 
is available in the buffer. In this case, the full en^or recovery cannot be per- 
formed. However, the receiving side can, at least, detect the loss of packets. 



6.2 ERROR MESSAGE PACKET 

The error-message packet format is the following: 



LSB 






MSB 


Packet header 0x05 


Sequence No 


Error Type 


\ SEQ No with Error 


(8-blt field) 


(8-blt field) 


(8-bit field) 


1 (8-blt field) 



Erroftype ; j 






0x00 


Reserve6 




;:|)xo:i;;.:,. % 


: pyertiin Erroif:^^^ 




0x02 


Parity Error 




.ox03:;;-:'-;:....l:;; 


- Reseiyed':|} • 




0x04 


Framing Error 






.Reserved:;. 




0x08 


CRC Error* 


Not applicable In Mode 0x14 








0x0A-0x80 


Reserved 




_^0x8ri;/.:::}' f; 


. lylissing Retransmissbh Packet 




0x82- OxFF 


Reserved 





Table 6. 1: Error Type available 
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6-3 EXAMPLE OF SIGNALLING 



Bluetooth. 



Retransmitted Packet with Seq No=5 
Packet witli Seq No= 5 Packet with Seq No = 6 CTS change detected & 
I Byte with an error TX aborted 



RX Data of Host Side 



TX Data of Host Controller Side 



1 



-RTS Of Host Side 



M -CTS of H.C. Side 



H.C. side Tdetect 



Close to Host side Tdetect 

< ► 

Minimunn Queue length -1 (packet length) 



TX Data of Host Side 



^ I RX Data of H.C .Side 
Error Packet 



-CTS of Host Side 



\ -RTSof H.C. Side 
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6.4 CONTROL FLOW EXAMPLES 

6.4.1 Case 1, Normal Recovery Process 



Bluetooth. 



Controller Side 



' ■ ' detected. : -74 '% "'■ . 4?': 



3) Deasserts RTS 



mes^ is stored In the TX • ; ; 

;:4b) Enipties theiF^.R waits for 
i'- Tdetect::(Host):am^ 



Host Side 



"ivdetected^ ^gJ-l^/C^^'^'-'fp BP'hM:' 

1) Ctr!/Data[n] Is sent out and Ctrj/Data[n] is 
stored in the retransmission holding 
buffer. 



5a) Stops further transmission and waits 
until the TX FIFO is empty (or Flush the 
FIFO if it can.) 

5b) Enror message for [n] is received. 



7) The asserted CTS is detected. 
:: 8) RiBteflsmlte C^^^^^ : : : 



6.4,2 Case 2, Both sides detect an error simultaneously 



Controller Side 


. Host Side 


1) Ctrl/Data[x] is sent and Ctrl/Data[x] is 


i by': f^S* is , ias|;ert|d : gmd^ tlie ai^ei^ : CTS^ is j 
^etiecte^ ; -X • M 11 '^l = L - ^^M^ ' -i 
1) Ctrl/Data[n] is sent and Ctrl/Data[n] is 


stored in the retransmission holding 


stored in the retransmission holding 


buffer. 


buffer. 


^■^ 2 j; C^\ipafB[r\i fs^' reoeii^ ' With; a n %rciW- , 


i:i2)-Ctii/p^ 


3) Deasserts RTS. 
::4):Petects' cf Sdeasserte^^^^^^ 


3) Deasserts RTS. 

;4)';betec ;GTS ciey sert^ ; ;* ; '..^ v . J 


5a) Stops further transmission and waits 


5a) Stops further transmission and waits 


until the TX FIFO is empty (or Flush the 


until the TX FIFO is empty (or Flush the 


FIFO if it can). 


FIFO if it can). 
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Bluetooth 


Controller Sid 


Host Side 


■ Fmoties thS.^ R^^ wafe to Td6- ^ ^ 


;:-5b) ^gmf^jes;tfiiB Ipc^pFO-an^ wafts-fW: . :■; 


6) Asserts RTS. 


6) Asserts RTS. 


8) Error message for [n] is sent and Error 
nnessage for [n] is stored in the TX 
retransmit holding buffer. 


8) Error message for [x] is sent and Error 
message for [x] is stored in the TX 
retransmit holding buffer. 


10) Retransmits Ctrl/Data[x]. 


10) Retransmits Ctrl/Data[n). 


6.4.3 Case 3, Error Message with an error 


Controller Side 


Host Side 


^ iRTS-i^;ia$s^^ 


' Fir® j|issi^d :iodi!^| ' Sissil^ielcl MM ^ ■. 

1) Ctrl/Data[n] is sent and Ctrl/Data[n] is 
stored in the retransmission holding 
buffer. 


■•:2)::|>ti^/C3^^ 
3) Deasserts RTS. 

;^r[n]|s stpj^ in;th^::1^ re^^ 






5a) Stops further transmission and waits 
until the TX FIFO is empty (or Flush the 
FIFO if it can.) 

5b) Error message for [n] is received with an 
error. 

;;^6a)|b0asse|ts^^ 


7) Detects CTS deasserted. 
StS^siifiiftS^ vu^ait?:;ii^^^ 

^:v:p;: lit iianf^)! -I; - § WM:^ t M ' % ' - $ ■ ■ : " ^^-ym . : 


'fb)|EmMjefS; FfgO aincliwalts ;f6r;;inrcje^ 
;p :^;:{dbntroii^^^^ ■■ 
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Bluetooth. 



Controller oia 






9a) Error message for Err{n] is sent and 
Error m ssage for Err[n] is stored in the 
retransmission holding buffer. 


:-;-10a) Eirorme^sage^ ifor-Errfnjiis;^^^ ; V;!: 


9b) Asserts RTS. 


11) Retransmits Enror message for [n]. 


::12): Error message for.(h} is received/ -y^ 
13) Retransmit Ctrl/Data[n]. 
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HOiUART TRANSPORT LAYER 



addendum to the HCI document 



This |locum€|it describes the UART transport 
layerf betwe#i the Host and the Host Controller), 
ommand, event and data packets flow 
gh thif layer, but the layer does not decode 



BLUETOOTH SPECIFICATION Version 1 .0 B page 796 of 1 082 

HCI UART Transport Layer BlUfitOOtll 



796 



29 November 1999 



BLUETOOTH SPECIFICATION Version 1.0 B page 797 of 1082 

HCI UART Transport Layer BlUfitOOtll 

CONTENTS 

1 General 798 

2 Protocol 799 

3 RS232 Settings 800 

4 Error Recovery 801 



29 November 1999 



797 



BLUETOOTH SPECIFICATION Version 1.0 B 



page 798 of 1082 



HCI UART Transport Layer 

1 GENERAL 



The objective of this HCI UART Transport Layer is to make it possible to use 
the Bluetooth HCI over a serial interface between two UARTs on the same 
PCB. The HCI UART Transport Layer assumes that the UART communication 
is free from line errors. See also "HCI RS232 Transport Layer" on page 775. 



Bluetooth. 



Bluetooth 
Host 


Bluetooth HCI 


Bluetooth 
Host 

Controller 


^ ► 



HCI UART Transport Layer 
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2 PROTOCOL 



There are four kinds of HCI packets that can be sent via the UART Transport 
Layer; i.e. HCI Command Packet, HCI Event Packet. HCI ACL Data Packet 
and HCI SCO Data Packet (see "Host Controller Interface Functional Specifi- 
cation" on page 517). HCI Command Packets can only be sent to the Bluetooth 
Host Controller, HCI Event Packets can only be sent from the Bluetooth Host 
Controller, and HCI ACL/SCO Data Packets can be sent both to and from the 
Bluetooth Host Controller. 

HCI does not provide the ability to differentiate the four HCI packet types. 
Therefore, if the HCI packets are sent via a common physical interface, a HCI 
packet indicator has to be added according to Table 2.1 1 below. 





iHGKpiackeU lll^'-'S 


HCI Command Packet 


0x01 


■HC! |cir^Data*:Pack(^r -.-^^^ 


;:;px02- - :f 


HCI SCO Data Packet 


0x03 


.-•HCI-EventlPack^^ 


hOx04 . 



Table 2. 1: HCI packet indicators 



The HCI packet indicator shall be sent immediately before the HCI packet. All 
four kinds of HCI packets have a length field, which is used to determine how 
many bytes are expected for the HCI packet. When an entire HCI packet has 
been received, the next HCI packet indicator is expected for the next HCI 
packet. Over the UART Transport Layer, only HCI packet indicators followed by 
HCI packets are allowed. 
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3 RS232 SETTINGS 

The HCI UART Transport Layer uses the following settings for RS232: 

Number of data bits: 8 

:||a^:it:^::bli^^^^^^^^^^ Jp-fja^^ 
stop bit: 1 stop bit 

Flow-off response time: 3 ms 

Flow control with RTS/CTS is used to prevent temporary UART buffer overrun. 
It should not be used for flow control of HCI. since HCI has its own flow control 
mechanisms for HCI commands, HCI events and HCI data. 

If CTS is 1, then the Host/Host Controller is allowed to send. 
If CTS is 0, then the Host/Host Controller is not allowed to send. 

The flow-off response time defines the maximum time from setting RTS to 0 
until the byte flow actually stops. 

The RS232 signals should be connected in a null-modem fashion; i.e. the local 
TXD should be connected to the remote RXD and the local RTS should be con- 
nected to the remote CTS and vice versa. 
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4 ERROR RECOVERY 



If the Host or the Host Controller lose synchronization in the communication 
over RS232, then a reset is needed. A loss of synchronization means that an 
incorrect HCI packet indicator has been detected, or that the length field in an 
HCI packet is out of range. 

If the UART synchronization is lost in the communication from Host to Host 
Controller, then the Host Controller shall send a Hardware Error Event to tell 
the Host about the synchronization error. The Host Controller will then expect 
to receive an HCLReset command from the Host in order to perform a reset. 
The Host Controller wilt also use the HCLReset command in the byte stream 
from Host to Host Controller to re-synchronize. 

If the UART synchronization is lost in the communication from Host Controller 
to Host, then the Host shall send the HCLReset command in order to reset the 
Host Controller. The Host shall then re-synchronize by looking for the HCI 
Command Complete event for the HCLReset command in the byte stream 
from Host Controller to Host. 

See "Host Controller Interface Functional Specification" on page 517 for HCI 
commands and HCI events. 
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LUETOOTH TEST MODE 



This fiocumint describes the test mode for 
hardware ar|il low-level functionality tests of 

ooth divices. The test mode includes 
transmitter Jests (packets with constant bit 
ems) spd loop back tests. 
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1 GENERAL DESCRIPTION 



The test mode supports testing of the Bluetooth transmitter and receiver. It is 
intended mainly for certification/compliance testing of the radio and baseband 
layer, and may also be used for regulatory approval or in-production and after- 
sales testing. 

A device in test mode must not support normal operation. For security reasons 
the test mode is designed such that it offers no benefit to the user. Therefore, 
no data output or acceptance on a HW or SW interface is allowed. 



1.1 TEST SETUP 

The setup consists of a device under test (DUT) and a tester. Optionally, addi- 
tional measurement equipment may be used. 





A 


Tester 




\ Additional 


'I 


1 Measurement 


1 


1 Equipment 




(optional) j 



Control commands 



Test data 



Device under 
Test 



T 



Local activation/enabling 



Figure 1. 1: Setup for Test Mode 



Tester and DUT form a piconet where the tester acts as master and has full 
control over the test procedure. The DUT acts as slave. 

The control is done via the air interface using LMP commands (see Section 3 
on page 817 and "Link Manager Protocol" on page 185). Hardware interfaces 
to the DUT may exist, but are not subject to standardization. 

The test mode is a special state of the Bluetooth model. For security and type 
approval reasons, a device in test mode may not support normal operation. 
When the DUT leaves the test mode it enters the standby state. After power-off 
the Bluetooth device must return to standby state. 
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1.2 ACTIVATION 



The activation may be carried out locally (via a HW or SW interface), or using 
the air interface. 

• For activation over the air interface, entering the test mode must be locally 
enabled for security and type approval reasons. The implementation of this 
local enabling is not subject to standardization. 

The tester sends an LMP command that forces the DUT to enter test mode. 
The DUT terminates all normal operation before entering the test mode. 
The DUT shall return an LMP_Accepted on reception of an activation com- 
mand. LMP_Not_ Accepted shall be returned if the DUT is not locally 
enabled. 

• If the activation is performed locally using a HW or SW interface, the DUT 
terminates all normal operation before entering the test mode. 

Until a connection to the tester exists, the device shall perform page scan 
and inquiry scan. Extended scan activity is recommended. 



1.3 CONTROL 

Control and configuration is performed using special LMP commands (see 
Section 3 on page 817). These commands must be rejected if the Bluetooth 
device is not in test mode. In this case, an LMP_not„accepted is returned. The 
DUT shall return an LMP_accepted on reception of a control command when in 
test mode. 

A Bluetooth device in test mode must ignore all LMP commands not related to 
control of the test mode. LMP commands dealing with power control and the 
request for LMP features (LMP_features_req) are allowed in test mode; the 
normal procedures are also used to test the adaptive power control. 

The DUT can be commanded to leave the test mode by an LMP_Detach com- 
mand or by sending an LMP_test_control command with test scenario set to 
'exit test mode'. 
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2 TEST SCENARIOS 



2.1 TRANSMITTER TEST 

The Bluetooth device transmits a constant bit pattern. This pattern is transmit- 
ted periodically with packets aligned to the slave TX timing of the piconet 
formed by tester and DUT. The same test packet is repeated for each transmis- 
sion. 

The transmitter test is started when the master sends the first POLL packet. In 
non-hopping mode agreed frequency is used for this POLL packet. 

The tester transmits at his TX slots (control commands or POLL packets). The 
slave starts burst transmission in the following slave TX slot. The master's poll- 
ing interval is fixed and defined beforehand. The device under test may trans- 
mit its burst according to the normal timing even if no packet from the tester 
was received. 

The burst length may exceed the length of a one slot packet. In this case the 
tester may take the next free master TX slot for polling. The timing is illustrated 
in Figure 2.1. 



Burst Length Burst Length 
POLL < ► PO^L ^ ► 









Test Packet 








Test Pac 


ket 


■ ■ ■ 






laster TX 


1 1 1 

1 Slave TX | Master TX | Slave TX 


Master TX 


1 

1 Slave TX 


time ^ 



Figure 2. 1: Timing for Transmitter Test 
2.1.1 Packet Format 

The test packet is a normal Bluetooth packet, see Figure 2.2. For the payload 
itself see below. 



Bluetooth. 
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Bluetooth. 



Acceiss Gdde 



packet. 



:.Payl.4|ac|;: 



ACL Packet 
(with CRC) 



AUX1 Packet 



fl^ieacler 



Hebder: 



SCO Packet 



Figure 2.2: General Format of TX Packet 

During configuration the tester defines: 

• the packet type to be used 

• payload length 

For the payload length, the restrictions from the baseband specification apply 
(see "Baseband Specification" on page 33.)- In case of ACL packets the pay- 
load structure defined in the baseband specification is preserved as well, see 
Figure 2.2. 

For the transmitter test mode, only packets without FEC should be used; i.e. 
HVS, DH1 , DH3, DH5and AUX1 packets. Support of packet type is only manda- 
tory up to the longest implemented packet type. 

In transmitter test mode, the packets exchanged between tester and DUT are 
not scrambled with the whitening sequence. Whitening is turned off when the 
DUT has accepted to enter the transmitter test mode, and is turned on when 

the DUT has accepted to exit the transmitter test mode, see Figure 2.3.'' 



1. Note: Implementations must ensure that retransmissions of the LMP_Accepted messages 
use the same whitening status. 
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Bluetooth. 



TESTER 



LMP_test_contro! 
(Enter Transmitter Test 



LMP_accepted 



LMP_test_control 
(Exit Transmitter Test 



LIVlP_accepted 



Figure 2.3: Use of whitening in Transmitter mode 



DUT 



Whitening on 



Whitening off 



Whitening on 



2-1.2 Pseudorandom Sequence 

In case of pseudorandom bit sequence, the same sequence of bits is used for 
each transmission (i.e. the packet is repeated, see above). A PRBS-9 

Sequence^ is used, see [2] and [3]. 

The properties of this sequence are as follows (see [3]). The sequence may be 
generated in a nine-stage shift register whose 5th and 9th stage outputs are 
added in a modulo-two addition stage (see Figure 2.4). and the result is fed 
back to the input of the first stage. The sequence begins with the first ONE of 9 
consecutive ONEs; i.e. the shift register is initialized with nine ones. 

• Number of shift register stages: 9 

• Length of pseudo-random sequence: 2^-1 = 511 bits 

• Longest sequence of zeros: 8 (non-inverted signal) 




Figure 2.4: Linear Feedback Shift Register for Generation of the PRBS sequence 



2. Some uncertainties about Japanese regulatory requirements have been reported. If neces- 
sary for regulatory type approval in Japan, some features might be added; e.g. a longer PN 
sequence. 
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2.1.3 Reduced Hopping Sequence 

To support quick testing of the radio over the complete frequency range, a 
reduced hopping mode is defined. Implementation of this mode is optional for 
Bluetooth devices and modules. 

Reduced hopping uses only five frequencies, on which a sequential hopping is 
done (channels 0, 23, 46, 69 and 93 are used^), see Figure 2.5. 



Channel ^ 0 ► 23 ► 46 ► 69 ► 93 — 

CLK27.imod5= 0 12 3 4 



Figure 2. 5: Reduced hopping scheme 

The timing is based on the Bluetooth clock of the tester. The value of CLK27.1 
(i.e. not using CLKq, representing half slots) modulo 5 is used to determine the 
transmit frequency. 

2.1.4 Control of Transmit Parameters 

The following parameters can be set to configure the transmitter test: 

1 . Bit pattern: 

• Constant zero 

• Constant one 

• Alternating 1010...'^ 

• Alternating 1111 0000 1111 OOOO..."* 

• Pseudorandom bit pattern 

• Transmission off 

2. Frequency selection: 

• Single frequency 

• Hopping Europe/USA 

• Hopping Japan 

• Hopping France 

• Hopping Spain 

• Reduced Hopping (implementation in Bluetooth devices and modules is 
optional) 

3. TX frequency 

• k => f := (2402 + k) MHz 

3. The range Is chosen to test the whole frequency range, which covers the nornnal 79 
channels, as well as Spanish, French and Japanese hopping schemes. The frequency 
assignment rule is the same as for th fixed TX frequ ncy: f = (2402 + k) MHz. 

4. It is recommended that the sequence starts with a one; but, as this is irrelevant for measure- 
ments, it is also allowed to start with a zero. 
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Bluetooth. 



4. Default poll period in TDD frames (n * 1.25 ms) 

5. Packet Type 

6. Length of Test Sequence (user data of packet definition in Baseband Speci- 
fication" on page 33.) 



2-1.5 Power Control 

If adaptive power control is tested, the normal LMP commands will be used. 
The DUT starts to transmit at the maximum power and reduces/increases its 
power by one step on every command received. 



2-1.6 Switch between different Frequency Settings 

A change in the frequency selection becomes effective when the LMP proce- 
dure is completed: 

The tester switches to a new frequency or hopping pattern after the 
LMP_Accepted message has been received. 

The DUT switches after the LMP_accepted message has been sent. 

Note : Loss of the LMP_Accepted packet will eventually lead to a loss of 
frequency synchronization that cannot be recovered. Similar problems occur in 
normal operation, when the hopping pattern changes. 



2.2 L00PBACK7EST 

The device under test receives normal baseband packets. The received pack- 
ets are decoded in the DUT, and the payload is sent back using the same 
packet type. The return packet is sent back in either the TX slot directly follow- 
ing the transmission of the tester, or it is delayed and sent back in the slot after 
the next transmission of the tester (see Figure 2.7 to Figure 2.9 on page 815). 

Alternatively, it is possible to implement a delayed loopback instead. Then the 
return packet is delayed to the following TX slot. There is no signalling to deter- 
mine or control the mode. The device behavior must be fixed or adjusted by 
other means, but must not change randomly. 

The tester can select, whether whitening is on or off. This setting holds for both 
up- and downlink. For switching the whitening status, the same rules as in Sec- 
tion 2,1 on page 808 (Figure 2.3) apply. 

The following rules apply (for illustration see Figure 2.6 on page 814): 

• Clearly, if the synch word was not detected, there will be no reply. 

• If the header error check (HEC) fails, the DUT replies with a NULL packet 
with the ARQN bit set to NAK. It is not mandatory to retum a NULL packet in 
this case; the DUT may send nothing. 
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• If the packet contains an LMP message relating to the control of the test 
mode this command is executed and the packet is not returned, though ACK 
or NAK is still returned as usual procedure. Other LMP commands are 
ignored and no packet is returned. 

• The payload FEC is decoded and the payload is coded again for transmis- 
sion. This allows testing of the FEC handling. If the pure bit error rate shall 
be determined the tester chooses a packet type without FEC. 

• The CRC is evaluated. In case of a failure, the payload is returned with 
ARQN = NAK. The CRC for the return packet is calculated for the returned 
payload. 

• If the CRC fails the number of bytes as indicated in the (possibly erroneous) 
payload header shall be looped back. 
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Bluetooth. 
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Figure 2.6: OUT Packet Handling in Loop Back Test 
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The timing for normal and delayed loopback is illustrated in Figure 2.7 to Figure 
2.9: 




RX Packet 
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RX Packet 
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Figure 2. 7: Payload & ARQN handling in normal loopback. 
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Figure 2.8: Payload & ARQN handling in delayed loopback - start. 
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Figure 2.9: Payload & ARQN handling in delayed loopback - end. 

The whitening is performed in the same way as it is used in normal active 
mode. 

The following parameters can be set to configure the loop back test: 

1 . Packet Class^ 

• ACL Packets 

• SCO Packets 

• ACL Packets without whitening 

• SCO Packets without whitening 



5. This Is includ d becaus , In th future, the packet type numbering may not remain 
unambiguous. 
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2. Frequency Selection 

• Single frequency (independent for RX and TX) 

• Hopping Europe/USA 

• Hopping Japan 

• Hopping France 

• Hopping Spain 

• Hopping reduced (optional) 

Hopping reduced uses only five frequencies on wtiich a sequential hopping is 
done on (channel: 0, 23, 46, 69 and 93 is used). 

3. Power level: (To be used according radio specification requirements) 

• power control or fixed TX power 

The switch of the frequency setting is done exactly as for the transmitter test 
(see Section 2.1 .6 on page 812). 
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3 OUTLINE OF PROPOSED LMP MESSAGES 



Table 3.1 lists all LMP messages used for test mode (see Link Manager Proto- 
col, Section 6 on page 237). 





xttUfnuer::::::::: 


.•Possible -^f^ 

■y. U 1 reCllO nx::::::::|: 


i' Cbnterits."; 'My^kii 


i: Position:;;:- 
:• • 1 ti^ Pa vto a rf 

X; 1 1 1 F;; CI jf 1 w CI V* 
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DO 

'^7 ' 


m — > s 


■hopping fiipd^ 

RX frequency ^ 
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LMP_detach 
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m ^ s 
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LMP_not_accepted 
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Table 3, 1: LMP messages used for Test Mode 
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1 Transmitter test - 0 pattern 










2 Transmitter test - 1 pattern 










3 Transmitter test - 1 01 0 pattern 










4 Pseudorandom bit sequence 










5 Closed Loop Back - ACL packets 










6 Closed Loop Back - SCO packets 
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Table 3.2: Parameters used in LMP_ Test_Control PDU 
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Bluetooth. 
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Table 3.2: Parameters used in LMP_ Test_Control PDU 

The control PDU is used for both transmitter and loop back tests. The following 
restrictions apply for the parameter settings: 
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Table 3,3: Restrictions for Parameters used in LMP_ Test_Control PDU 
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1 SCOPE 



The Bluetooth Promoters and the Bluetooth Adopters have signed the Promot- 
ers' Agreement and the Adopters' Agreement respectively. These agreements 
grant Promoters and Adopters a Bluetooth license for "products which comply 
with the Specification". 

This document specifies the requirements which must be met by a Promoter or 
Adopter to demonstrate that a particular product does "comply with the Specifi- 
cation", thereby qualifying that particular product to be subject to the rights 
extended by the Promoters' and Adopters' Agreements respectively. 

The Bluetooth Qualification Program is the process by which a Promoter or an 
Adopter demonstrates that a particular product meets the requirements speci- 
fied herein. This document provides an overview of the requirements and the 
Bluetooth Qualification Program. Further details are available through the 
Bluetooth Web site. 

Regulatory requirements and governmental type approval requirements are 
outside the scope of this document. 
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2 TERMS USED 



Bluetooth Trademark - As defined in the Promoters' Agreement and the 
Adopters' Agreement. 

Bluetooth Brand -Cowers all the brand elements specified in the "The Blue- 
tooth Brand Book". Equal to the Bluetooth Trademark. 

Bluetooth Logo or Logo - the brand element referred to as the 'figure mark' in 
the The Bluetooth Brand Book'. 

Bluetooth License - all the rights, defined in the Promoters' and Adopters' 
Agreements respectively, that are granted by compliance with the specification, 
i.e. the Bluetooth Patent License and the Bluetooth Brand License. 

Bluetooth Patent License - the applicable parts of the Bluetooth license con- 
sisting of patent rights or parts thereof as defined in the Promoters' and 
Adopters' Agreements respectively. 

Bluetooth Brand License -the applicable parts of the Bluetooth license con- 
sisting of trademark rights as defined in the Promoters' and Adopters' Agree- 
ments respectively. 

Protocol specification - defines the communication between two peer devices 
at a certain layer. 

Profile specification - defines the usage of (parts of) the protocol stack for a 
certain Bluetooth usage model. 

Bluetooth qualification process - the rules and procedures by which the manu- 
facturer demonstrates compliance to the Bluetooth specification. 

Bluetooth qualification program -the implementation of the Bluetooth qualifica- 
tion process. 

Bluetooth Qualification Review Board (BQRB)- responsible for managing, 
reviewing and improving the Bluetooth qualification program. The original 
Bluetooth SIG companies will appoint BQRB initial members. 

Bluetooth Qualification Test Facility (BQTF) - a test facility that is officially 
authorized by BQRB to test Bluetooth products. 

Bluetooth Qualification Body (BQB)-a specific person authorized by the 
BQRB to be responsible for checking declarations and documents against 
requirements, reviewing product test reports, and listing products on the official 
database of Bluetooth qualified products. 

Bluetooth Qualification Administrator (BOA) - a person responsible for admin- 
istering the Bluetooth Qualification Program on behalf of BQRB. 
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Implementation Conformance Statement (ICS) -a document that the manufac- 
turer attaches to the product when submitting it for qualification. It specifies all 
the implemented Bluetooth capabilities in detail. 

Bluetooth Fellow Adopter- equal to Bluetooth Promoters + Bluetooth Adopt- 
ers. 
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Bluetooth. 



3 LEGAL ASPECTS 



Rules and guidelines on how to use the Bluetooth Brand elements are stated in 
the document "The Bluetooth Brand Book" which is available on the Bluetooth 
Web site. 

The Bluetooth Specification has been created, according to our best knowl- 
edge, to meet regulatory requirements worldwide. Regulatory certification as 
such is not a part of the Bluetooth qualification requirements, yet it is a require- 
ment in all markets. It is the sole responsibility of each manufacturer to ensure 
that their products have all necessary regulatory approvals for the markets 
where their product(s) are intended to be sold or used. 

A product must complete Bluetooth Qualification to meet the requirements for 
"complying with the Specification". The Bluetooth license granted by the Pro- 
moters' and Adopters' Agreements respectively is valid only for qualified prod- 
ucts and is not transferable to other products. 

In this document, the 'Bluetooth license' is sometimes divided into the 'Blue- 
tooth patent license' and the 'Bluetooth brand license' for practical reasons. 
These terms correspond, respectively, to the terms 'necessary claims' and 
'trademark' in the Promoters' and Adopters' Agreements respectively. 

Sanctions will be invoked against any company responsible for producing or 
trading (a) products containing elements of the Bluetooth interface, as defined 
in the Bluetooth Promoters' Agreement and Adopters' Agreement respectively, 
that do not comply with the Specificafion, or (b) products containing elements 
of the Bluetooth Interface that have not completed Bluetooth Qualification. 

The Bluetooth SIG reserves the right to define a process for adding new Blue- 
tooth profiles after the release of the Specificafion 1 .0. 

A Bluetooth brand license is granted by Ericsson to all Fellow Adopters for the 
use of the trademark in connection with products complying with the Specifica- 
tion. 

Ericsson further provides Fellow Adopters a limited indemnity for costs and 
expenses incurred by the Fellow Adopter based upon the use of the trade mark 
within countries where Ericsson has registered the trademark. Ericsson does 
not take upon itself any liability regarding product, whether such liability is 
based on damages caused by the product for persons or property, or defects in 
the product itself. 
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4 THE VALUE OF THE BLUETOOTH BRAND 



The purpose of this document is to define the requirements for Bluetooth com- 
pliance This has been done while bearing the basic Bluetooth philosophy in 
mind: 

"Wireless Connections Made Easy" 

Examples of important end-user experiences are: 

• Reliable high-quality radio links, 

• Interoperability between products of any brands, 

• Easily understood product capabilities. 

A reliable radio link experience depends upon all products demonstrating com- 
pliance with the Bluetooth radio link performance specifications. Interoperability 
is achieved by protocol and profile implementation conformance. Ease of use 
depends upon clear, consistent documentation of Bluetooth capabilities in 
product literature. All these elements are addressed in the requirements for 
Bluetooth compliance. 
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5 THE BLUETOOTH QUALIFICATION PROGRAM 



This paragraph specifies the framework of the Bluetooth qualification program 
that a Bluetooth qualification applicant must perform. When completed, the full 
Bluetooth qualification program will be published at the Bluetooth web site. 

The Bluetooth qualification program ('Program') establishes the rules and pro- 
cedures by which the manufacturer demonstrates compliance to the Bluetooth 
specificafions, and the process by which the Bluetooth license may be used by 
product manufacturers and distributors. 

The Program defines the following entities: 

• Bluetooth Qualification Review Board (BQRB) - responsible for managing, 
reviewing and improving the Bluetooth qualification program. The original 
Bluetooth SIG companies will appoint BQRB initial members. 

• Bluetooth Qualification Administrator (BQA) - responsible for administering 
the Bluetooth Qualification Program on behalf of BQRB. 

• Bluetooth Qualification Test Facility (BQTF) - a test facility that is officially 
authorized by BQRB to test Bluetooth products. 

• Bluetooth Qualification Body (BQB) - a specific person authorized by the 
BQRB to be responsible for checking declarations and documents against 
requirements, reviewing product test reports, and listing products on the offi- 
cial database of Bluetooth qualified products. 

Functions and relationships are illustrated in Figure 5.1. 
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Figure 5.1: Bluetooth Qualification Process 
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Summary of the Qualification process: 

1. The Fellow Adopter submits the product for Bluetooth qualification to a 
BQTR The manufacturer must add temporary interfaces and/or functionality 
so that all implemented Bluetooth capabilities can be tested. The BQTF is 
not responsible for providing any secondary systems such as a LAN. PSTN 
or GSM network to facilitate the testing. Necessary documentation shall be 
provided; e.g. product description, user's manual and the Implementation 
Conformance Statement (a template for this document will be available at 
the Bluetooth web site). The BQTF tests each Bluetooth feature declared in 
the Implementation Conformance Statement according to the current Test 
Specification and BQRB policies and prepares a test report. 

2. The test results and product documentation are then sent to the BQB. The 
Fellow Adopter sends an application to the BQB requesting that the product 
be listed as ^Bluetooth Qualified'. The application shall contain - 

a) Precise product description, and 

b) Declaration of Compliance with the Bluetooth Specification 
(including this entire document) and the Bluetooth Brand Book, 
signed by a duly authorized official of the Fellow Adopter. 

3. When the application Is complete, the BQB issues a Qualified Product notice 
and (with the applicant's permission) lists the product on the official Blue- 
tooth Qualified products databases which can be viewed by all Fellow 
Adopters. 

The BQTF may either be a third-party test house or an internal function of the 
applying Fellow Adopter. Also the BQB can be either internal or external. Both 
the BQTF and the BQB must always be authorized by the BQRB. 

It is the responsibility of the manufacturer to establish any necessary non- 
disclosure agreements with BQTF, BQB and (if required) BQA. In the event the 
BQB cannot determine compliance the BQB may, with the applicant's permis- 
sion, submit information to the BQA for a ruling. In the event the BQRB must be 
consulted, the applicant will be requested to prepare a submission according to 
BQRB guidelines. 

The Fellow Adopter will be invoiced directly from BQTF and BQB for their 
respective sen/ices and expenses. The BQRB will also charge a fee to finance 
the administration associated with the Qualification program. Initially, this fee 
will be $3000 per listed product. It will subsequently be adjusted once per year, 
to reflect the actual cost. 
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6 BLUETOOTH LICENSE REQUIREMENTS FOR 
PRODUCTS 



This section summarizes the product requirements that must be met to com- 
plete a Bluetooth Qualification. 

The product requirements are divided into: 

• Bluetooth radio link requirements 

• Bluetooth protocol requirements 

• Bluetooth profile requirements 

• Bluetooth information requirements 

6.1 BLUETOOTH RADIO LINK REQUIREMENTS 

6.1.1 Requirement description 

The Bluetooth radio link shall meet certain minimum requirements, which are 
documented in the Test Specification. This is to establish and maintain the 
Bluetooth technology as the preferred choice for wireless short-range links. 
The Test Specification for the Bluetooth radio link requirements will be based 
on the Bluetooth specification Part A (Radio specification). 

6.1.2 Qualification 

The BQRB will issue a list of BQTFs that are allowed to qualify products 
against the Bluetooth performance requirements. 

6.2 BLUETOOTH PROTOCOL REQUIREMENTS 

The implementation of the lower layers of the Bluetooth protocol stack shall 
meet certain minimum requirements, which are documented in the Test Speci- 
fication. In order to verify that these requirements are met, individual testing of 
these protocols will be performed. The verification will be done by accessing 
the upper interface of these protocols through the Bluetooth Test Control Inter- 
face, TCI. How this test control interface will be used during verification is 
described in the Test Specification. 

The Test Specification for the Bluetooth protocol requirements will be based on 
the Bluetooth specification Part B, C, D and H (Base band, Link Manager, Log- 
ical Link Control and Adaptation and, if applicable, the Host Controller Inter- 
face). 
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6.2.1 Qualification 

The BQRB will issue a list of BQTFs that are allowed to qualify products 
against the Bluetooth protocol requirements. 

The manufacturer is allowed to modify both the HW and SW of the product, to 
make it possible to perform the protocol tests. If this is done, the manufacturer 
must guarantee that an identical implementation of Bluetooth specification Part 
B, C, D and H (Base band. Link Manager, Logical Link Control and Adaptation 
and, if applicable, the Host Controller Interface) is used in the real product. 



6.3 BLUETOOTH PROFILE REQUIREMENTS 



6.3.1 Requirement description 

The Bluetooth products shall meet certain minimum Bluetooth profile require- 
ments which, for each profile, is defined in the Test Specification. This is to 
ensure that the end user can benefit from interoperability between different 
products and brands. The Test Specification for the Bluetooth profile require- 
ments will be based on the Bluetooth specification Part K (Profile specifica- 
tions). 

The following general Bluetooth profile requirements must always be met: 

• The "Generic Access" profile must be complied with. 

• All implemented Bluetooth services must be described in the "Implementa- 
tion Conformance Statement". 

• All Bluetooth profiles declared in the "Implementation Conformance State- 
ment" must be implemented according to each profile specification. 

• All mandatory features of a Bluetooth profile role shall be implemented. All 
implemented optional Bluetooth features of a profile role shall be imple- 
mented according to the profile specification. 

• If a service, for which there exists a Bluetooth profile, shall be implemented, 
it must be done according to that profile. It is permitted to make improve- 
ments or add features to a profile, as long as interoperability is maintained 
with other products that have implemented the standard profile as described 
in the previous paragraph. Improvements or new features can only be acti- 
vated after proper negotiation between two Bluetooth devices. 

Notification: A Fellow Adopter that wants to implement a new service, for which 
there is no sufficient standardized Bluetooth profile specificafion available, is 
allowed to do so. However, this new service must never be referred to in a way 
that it could mistakenly be interpreted as being a standard Bluetooth profile and 
part of the Bluetooth specification. The manufacturer must inform the 
market as well as the end user in a clear and consistent way about these limita- 
tions in general interoperability. 
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6.3.2 Qualification 

The BQRB will issue a list of BQTF that are allowed to qualify products against 
the Bluetooth profile requirements. 

6.4 BLUETOOTH INFORMATION REQUIREMENTS 



6.4.1 Requirement description 

The manufacturer shall inform the market and end users in a clear and consis- 
tent way about the implemented Bluetooth capabilities. 

6.4.2 Qualification 

The product will be qualified against the Bluetooth information requirements. 

6.5 REQUIREMENTS ON BLUETOOTH ACCESSORY 
PRODUCTS 

6-5.1 Definition of 'Bluetooth accessory products' 

A Bluetooth accessory product is defined as "A product marketed to the end 
user, containing at least the hardware for the Bluetooth radio and baseband, 
yet not being a stand-alone Bluetooth product. After being installed in a host 
system, the product acts like a complete Bluetooth product." Examples of Blue- 
tooth accessory products: PC-Cards, serial port dongles, USB dongles. 

Bluetooth accessory products must also pass through the complete Bluetooth 
qualification process. To facilitate testing, the Bluetooth accessory product and 
the provided Bluetooth SW will be installed in a host device that is provided by 
the manufacturer. 

6.5.2 Qualification 

Same as in Section 6.1 - Section 6.4 above. 

6.6 REQUIREMENTS ON BLUETOOTH COMPONENTS 
6.6.1 Definition of "Bluetooth components" 

A Bluetooth component is defined as "A component product designed and mar- 
keted for the enabling of a complete Bluetooth product, which component prod- 
uct containing at least a subset of an existing Bluetooth Profile (see Section 6.3 
on page 833), yet not being able to function as a complete Bluetooth product". 
For example, a Bluetooth component might be a complete module designed for 
integration on a PC board, or an integrated circuit implementing all Bluetooth 
baseband and protocol functions. 
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A Bluetooth component is typically purchased and integrated by an original 
equipment manufacturer (OEM) into a product designed for sale to an end 
user. 

A Bluetooth component manufacturer will typically obtain a limited Bluetooth 
License enabling the manufacturer to identify the component's Bluetooth capa- 
bilities. A component manufacturer may also wish to minimize their OEM cus- 
tomer's qualification testing requirements through one-time qualification testing 
of a reference design based on the component. Qualifying a component is not 
necessary as long as the final product is qualified. The possibility has been cre- 
ated only to ease the marketing of Bluetooth components. 



6.6.2 Requirement description 

Bluetooth components must pass through the complete Bluetooth qualification 
process in a reference design configuration documented in an application note. 

Bluetooth products incorporating a limitedly licensed Bluetooth component 
must also pass through the complete Bluetooth qualification process. However, 
certain tests may be waived if so indicated in the limited Bluetooth License 
valid for the component. 

A component's limited Bluetooth License identifies specific qualification tests 
that may be considered pre-qualified by an OEM manufacturer using the com- 
ponent in an end-user product. Those specific qualification tests are identified 
by the BQTF, which performs qualification testing of the Bluetooth component 
in its reference design. BQTF identifies those tests based on the unique design 
characteristics of the component in consultation with the manufacturer. 

6.6.3 Qualification 

A product which includes an integrated Bluetooth component must be qualified 
as described in SecUon 6.1 - SecUon 6.4 above, possibly with some of the tests 
waived if so indicated in the limited Bluetooth License valid for the component. 
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7 BLUETOOTH LICENSE PROVISIONS FOR EARLY 
PRODUCTS 



The process and conditions for qualifying early products (that may contain rea- 
sonable deviations from the Bluetooth specification) will be defined and pub- 
lished on the Bluetooth web site. 
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8 BLUETOOTH BRAND LICENSE PROVISIONS FOR 
SPECIAL PRODUCTS & MARKETING 



This section defines the requirements for using the Bluetooth Brand elements 
for special products and marketing. 

8.1 BLUETOOTH DEVELOPMENT TOOLS AND DEMOS 

8.1.1 Definition of 'Bluetooth Development tools and demos' 

Bluetooth Development tools and demos are products intended either for 
developing commercial Bluetooth products or for demonstrating the Bluetooth 
technology in a certain application. Neither one may be sold to ordinary con- 
sumers. 

8.1.2 Requirement description 

The manufacturer and/or seller of these products shall clearly inform the 
targeted audience/customer that the products are for development and/or dem- 
onstration purpose only, and that they have not been qualified to the Bluetooth 
specification. 

8.1.3 Qualification 

Qualification testing by a BQTF is not required. Qualification is based upon the 
applicant's declaration of compliance with the Specificafion and Brand Book, 

8.2 MARKETING 

The Bluetooth Brand elements may be used for general marketing and product 
announcements. The rules of the Bluetooth Brand Book must be followed. 

If the Bluetooth Brand is used on a give-away item, where it is not obvious to 
everyone that the product doesn't contain a Bluetooth radio, then a clear dis- 
claimer has to be displayed on the product (e.g. a give-away calculator with the 
Bluetooth brand must have a visible disclaimer since the idea of calculators 
with in-built Bluetooth actually makes sense). 
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9 RECOMMENDATIONS CONCERNING INFORMATION 
ABOUT A PRODUCTS BLUETOOTH CAPABILITIES 



In addition to the requirements set forth in the Brand Book, it is recommended 
that at least the following pieces of information are provided for the market and 
the end-user: 

• The Bluetooth capabilities of the product should be stated, at least in brief, 
on the product box. 

• The user's manual (or corresponding information) should contain a section 
where all the Bluetooth capabilities are described. A list of qualified standard 
profiles using the profile names listed in Appendix B should be contained. If 
applicable, revision numbers of the implemented profiles shall be included. 
For early products a list of interoperable products instead of profiles should 
be contained. 

Important places for end-user information are user's manuals (user guides), 
leaflets, boxes and other advertisement material. 

An example of information in a user's manual can be found in Appendix A on 
page 840. 

It is important that new profiles, not sanctioned by the Bluetooth SIG, cannot be 
mistaken for profiles contained in the Bluetooth specification. In case of new 
profiles it is important that the manufacturer inform the market and the end user 
about what other products that interoperability can be expected with. 
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10 QUALITY MANAGEMENT, CONFIGURATION 
MANAGEMENT AND VERSION CONTROL 



Each manufacturer is responsible for keeping a high quality level when oiass- 
producing an approved product. Products that are put on the market shall meet 
the requirements for which the product has been qualified. 

A Bluetooth Qualification covers specific product hardware and software ver- 
sions. The product's manufacturer is responsible for ensuring that all produc- 
tion units perform identically to the qualified version, by maintaining appropriate 
quality management and configuration management programs. 

Major hardware or software modifications related to the Bluetooth part of a 
qualified product, shall be documented and submitted to the BQB for review. 
Based on the manufacturer's representations, the BQB may certify that the 
product requires no further testing and allow the license to be updated to 
include the new version. In other cases, the BQB may identify a limited subset 
of tests that must be performed by a BQTF to qualify the new version. 

Addition of Bluetooth capabilities requires a new qualification of the product. 



Quality management, configuration management and version conlrot29 Noveml>er 1999 



839 



BLUETOOTH SPECIFICATION Version 1.0 B 



page 840 of 1082 



Bluetooth Compliance Requirements BlUGtOOtH 

11 APPENDIX A - EXAMPLE OF A "BLUETOOTH 
CAPABILITY STATEMENT" 



This is an example of a Bluetooth Capability Statement in a User's Manual. 



Bluetooth Capability Statement 

This product is manufactured to meet the Bluetooth 
Specification 1.0. The following Bluetooth functions are supported: 

• Service Discovery 

♦ Cordless Telephony 

♦ Local Telephony 

• Headset 



The profiles normally use roles. In most cases it is obvious which role a certain 
product has implemented. Where doubt or misunderstanding could arise, the 
implemented role shall be explicitly stated after the profile name. 
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12 APPENDIX B - MARKETING NAMES OF 
BLUETOOTH PROFILES 



Bluetooth uses profiles to ensure interoperability between products and 
brands. The profile specifications are technical documents. In the marketing 
communication it Is strongly recommended to use the names listed in Table 
12.1. 



Profile name 


Marketing name 


Comments 


Generic Access . . ■ 


.' Generic Access :^ • i 




Service Discovery 


Service Discovery 

|^ec^jel|^t^ 




Intercom 


Local Telephony 




:Headset=Vj| 


HeacjsiBt 




Speaker phone 


Speakerphone 




Diat-yp. net^ ' 


Modeim ' ..-f:]::^^'- .^W^--' 




Fax 


Fax 




• .li/Usi Acces^^^ 


\ Netwprk:access'point v 




Conferencing 


Conferencing 
SenaNpbrt; • y h^ ■ ■ 




:;S0nal ^)ort 

Generic Object Exchange 


Object Exchange 




'.Object pSsh;:; 


•ji-Object push."|?f;i:| . 




File Transfer and Browsing 
; Siynchrqnization : 


Data sharing 
Synchrdhfzatlpn 





Table 12. 1: Marketing names for Bluetooth profiles 
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1 INTRODUCTION 



1.1 TERMS USED 

lUT = Implementation Under Test: An implementation of one or more OSI pro- 
tocols in an adjacent user/provider relationship, being that part of a real open 
system which is to be studied by testing. 

This term will be used when describing the test concept for Bluetooth acces- 
sory products and Bluetooth components. The definition of Bluetooth acces- 
sory products and Bluetooth components can be found in Part 1:2 / Section 
6.5.1 on page 834 and in Part 1:2 / Section 6.6.1 on page 834. 

SUT = System Under Test: The real open system in which the lUT resides. 
This term will be used when describing the test concept for Bluetooth products. 

TCI = Test Control Interface: The interface and protocol used by the tester to 
send and receive commands and messages to and from the upper interface of 
the SUT/IUT. 

1.2 THE NEEDS FOR A UNIFIED TEST INTERFACE 

For all Bluetooth accessory products, Bluetooth components and Bluetooth 
products, protocol testing will be used to verify the implemented functionality in 
the lowest layers; i.e. conformance testing. 

For this type of testing, an upper tester (UT) will be required to completely test 
the implementation. 

In order to shield the tester from having to adopt to each and every implemen- 
tation of lUTs or SUTs. the use of a standardized control interface is mandated. 
This concept puts some extra burden upon the manufacturer of the lUT/SUT. 
The manufacturer must: 

• adopt the implementation-dependent interface to the TCI 

• supply, with the lUT, the adapter needed (can be HW, SW or FW) 
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1 .3 USAGE OF THE INTERFACE 

The Bluetooth Test Control Intierface, TCI, will be used when verifying the Blue- 
tooth protocol requirements for a Bluetooth accessory product, Bluetooth com- 
ponent or a Bluetooth product. More specifically, the TCI will be used when 
verifying implemented functionality of the: 

• Baseband layer, BB (the protocol-related part) 

• Link Manager Protocol, LMP 

• Logical Link Control and Adaptation Protocol, L2CAP 

and, if support of the HCI is claimed by the manufacturer: 

• Host Control Interface, HCI 
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2 GENERAL DESCRIPTION 



The interface used between the tester and the SUT/lUT will be either of two 
types: 

1. TCI-HCI 

This interface is semantically and syntactically identical to the HCI interface 
described in "Part H:1" on page 517. 

2. TCI-L2CAP 

This interface is based on the HCI interface, and will be used during verifica- 
tion of the L2CAP layer of the SUT/lUT 

The proposed physical bearer is one of the transport layers specified for the 
HCI: USB. RS232 or UART, see "Part H:2" on page 759, "Part H:3" on 
page 775 or "Part H:4" on page 795. However, alternatives do exist. More 
details will be given in the following sections. 



2.1 BASEBAND AND LINK MANAGEMENT VERIFICATION 

For the verification of the link control part of the Baseband layer and for the 
Link Manager layer, the TCI-HCI interface will be used as the interface 
between the test system and the upper interface of the SUT/lUT. The test sys- 
tem accesses the upper interface of the SUT/lUT by sending HCI commands 
and receiving HCI events from the SUT/lUT as described in the "Host Control- 
ler Interface Functional Specification" on page 517. The supported functionality 
on the TCI-HCI interface depends on the implemented functionality of the BB 
and LM layers. 

The transport bearer used between the tester and the SUT/lUT can be of either 
of two types: 

1 . A physical bearer of one of the types USB, RS232 or UART, as defined in 
Part H:2, Part H:3 or Part H:4. It is recommended to use one of these three 
physical bearers as transport bearer between the SUT/lUT and the test sys- 
tem. 

2. A 'software' transfer bearer; i.e. there is no physical connection between the 
tester and the SUT/lUT. In this case, the manufacturer of the SUT/lUT must 
supply, when sending in the device for testing, a test software that can be 
operated by a test operator. The operator will receive instructions from the 
tester and will execute them on the SUT/lUT. The software must support the 
same functionality as if using the TCI-HCI with a physical bearer. Use of the 
'software' interface must be agreed upon between the manufacturer of the 
SUT/lUT and the test facility that will perform the verification. The test facili- 
ties can themselves specify requirements placed on such an interface. 

A schematic example is shown in Figure 2.1 of a possible test configuration for 
BB and LM verification of Bluetooth products which do not support HCI, and 
which use a physical transport bearer for the TCI-HCI interface. In this figure, 
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the TC (Test Control) Software represents what the manufacturer has to supply 
with the SUT/lUT when sending it in for verification. The functionality of the TC 
software is to adapt the implementation-dependent interface to the TCI-HCI 
interface. 



TCI 



TC Software 



Adapter 



HCI Firmware 



Physical Bus 



TCl-HCI 







bepen<ient tsj^^f^Kd 






LM 






BB 






RF 









Air 
Interface 




HCI Driver 



Physical Bus 



Test Suite 
Executor 



LM 



BB 



RF 



Figure 2. 1: Baseband and LM verification without HCI - physical transport bearer 



Figure 2.2 shows a schematic example of the test configuration for the same 
Bluetooth product using a 'software' transfer bearer for the TCl-HCI interface. 
Here, the role of the TC Software is to represent the application that can be 
controlled by the test operator. 
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Figure 2.2: Baseband and LM verification without HCI - software transport bearer 

2.2 HCI VERIFICATION 

The TCI-HCI interface may also be used for HCI signalling verification. The 
HCI signalling will only be verified if support of the HCI functionality is claimed 
by the manufacturer. 

The transport bearer between the tester and the SUT/lUT shall be one of the 
types USB, RS232. or UART. as defined in Part H:2. Part H:3 or Part H:4. 

A schematic example is shown in Figure 2.3 of one possible test configuration 
for HCI verification of Bluetooth products, using a physical transport bearer for 
the TCI-HCI interface. As can be seen from the figure, no extra test control 
software is needed. Instead, the implemented HCI will be used as the interface 
to the tester. 
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Figure 2.3: HCI verification 



2.3 L2CAP VERIFICATION 



The TCI-L2CAP interface is based on the HCI and will be used during verifica- 
tion of the L2CAP layer of the SUT/lUT It uses the general event and com- 
mand syntax as specified in Part H:1 , and the mapping to transport layers is 
also identical to the ones defined in Part H:2. Part H:3 or Part H:4. Commands 
and events are defined according to the specified L2CAP service interface. 
See Part D / Section 7 on page 295. 

The defined service primitives in the Logical Link and Control Layer specifica- 
tion, Part D / Section 7 on page 295, will be used as reference. However, the 
primitives for L2CAP events and commands must be converted into messages 
of the same format as used for the HCI events and commands. The mapping of 
the L2CAP events and commands to HCI format is described in Section 4 of 
this document. 

A schematic example is shown in Figure 2.4. of how the test configuration can 
look for L2CAP verification of Bluetooth products, using a physical transport 
bearer for the TCI-L2CAP interface. In this figure, the TC (Test Control) Soft- 
ware represents what the manufacturer has to supply with the SUT/lUT when 
sending it in for verification. The functionality of the TC software is to adapt the 
implementation-dependent interface to the TCI-L2CAP interface. 
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Figure 2.4: L2CAP verification 
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3 TEST CONFIGURATIONS 



This section describes the test configurations that will be used when verifying 
the different Bluetooth requirements. 

3.1 BLUETOOTH RF LINK REQUIREMENTS 

For the verification of the Bluetooth RF Link requirements, the defined test 
mode will be used, see "Part 1:1" on page 803. 

The Test Specification for the Bluetooth radio link requirements will be based 
on the Bluetooth specification Parts A and B. and will contain the relevant test 
instnjctions that should be carried out on the SUT/lUT 



3.1.1 Required Interface(s) 

For this type of verification, only the air interface is required. See Figure 3.1 . 
As stated in Part 1:1 / Section 1 .2 on page 807, for security reasons, the test 
mode must be locally enabled. The implementation of this local enabling is not 
subject to standardization. 



Local activation/enabling 

Used for test mode 
signalling 




Figure 3. 1: Test Configuration for RF link requirement verification 



3.2 BLUETOOTH PROTOCOL REQUIREMENTS 

Dependent on which Bluetooth layers BB, LM, HCI or L2CAP are implemented 
in the product sent in for verification, the amount of testing needed to verify the 
Bluetooth protocol requirements will differ. Also, the TCI used during the verifi- 
cation may be different. 
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The Test Specification for the Bluetooth protocol requirements will be based on 
the Bluetooth specification Part A to Part D and Part H. if applicable, and will 
contain the relevant test instructions that should be carried out on the SUT/IUT. 



3.2.1 Required Interface(s) 

For this type of verification, both the air interface of the SUT/IUT and the test 
control interface are required. The latter will be one of the types described in 
section 2. 



3.3 BLUETOOTH PROFILE REQUIREMENTS 

For each profile the Bluetooth product claims to confonn to, profile testing will 
be performed to verify the Bluetooth profile requirements in order to ensure 
interoperability between products; i.e. interoperability testing. 

The Test Specification for the Bluetooth profile requirements will be based on 
the Bluetooth specification Part K Volume 2, and will contain the relevant test 
instructions that should be carried out on the SUT. 



3.3.1 Required Interface(s) 

For this type of verification, both the air interface of the SUT and the supported 
MMI, as described in the profile, will be used during verification, see Figure 3.2. 
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Figure 3.2: Test Configuration for Profile requirement verification 
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4 TCI-L2CAP SPECIFICATION 



Note: This specification maps the L2CAP service interface to an appropriate 
TCI. This section is based on the 0.95b version of the L2CAP specification. 

4.1 EVENTS 

In the L2CAP service interface, indications are mapped to callback functions. 
The corresponding response parameters are submitted in the return parameter 
of these functions. For the TCI, the indications are mapped to events and the 
responses to commands. 

A single event code is reserved for testing purposes: OxFE. To distinguish the 
L2CAP events, a parameter 'Event^lD' is submitted as first parameter. This 
parameter is a single octet, resulting in 256 possible events. The assignment is 
given in Table 4.1. 







0x00 


Reserved 






0x02 


l_2CA_Configlnd 






0x04 


L2CA_QoSViolationlnd 







Table 4. 1: Assignment of event IDs 

The events in this test interface follow the HCI syntax as defined in Part H:1 / 
Section 4.4.2 on page 535. 

4.1.1 Connect Indication 







/i^rtt-'PajRa 


L2CA_Connectlnd 


OxFE 


EvenLID, BD_ADDR, CID, PSM, Identifier 



For more details and the event parameter, see Part D / Section 7.1 on page 
295. 
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4.1.2 C nfigurati n Indication 



Bluetooth. 







; Eyerti:Paraim%ei^^ T JPS 


L2CA_Configlnd 


OxFE 


Event_ID, CID, OutMTU, InFlow. FlushTO 



For more details and the event parameter, see Part D / Section 7.1 on page 295. 
4.1.3 Disconnect Indication 



_ Eyerit'. /: 


Eyeht Cbdtt: ; 


. iEyeiitF>aram^tM>*":S^^ 


L2CA_Disconnectlnd 


OxFE 


Event.lD, CID 



For more details and the event parameter, see Part D / Section 7.1 on page 295. 
4.1.4 Violation Indication 





^ Eveirit iCUMfft 


•'Ev^ht-Partime 


L2CA_QoSVIolatlonlnd 


OxFE 


Event.lD, BD.ADDR 



For more details and the event parameter, see Part D / Section 7.1 on page 295. 
4.2 COMMANDS 

The commands in this test interface follow the HCI syntax as defined in Part 
H:1 / Section 4.4.1 on page 532, The return parameters are sent back using a 
Command Complete event, see Part H:1 / Section 5.2.14 on page 723 and 
Part H:1 / Section 4.4.1 on page 532. 

To distinguish the commands used for L2CAP testing from HCI commands, a 
single subgroup is reserved for the L2CAP test interface. Figure 4.1 shows how 
to code and decode the OpCode field in the HCI command packet used for 
testing. 



LSB 
0 



12 



MSB 
16 



0x0001 - 0x03FF 

OCF range for testing purposes 



1 



1 



1 



1 



0x3E 

Subgroup for testing 



OpCode field in HCI command packet 



Figure 4. 1: HCI Opcode field values used for testing 
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The assignment of the OpCode Command Field, OCR for the L2CAP com- 
mands is summarized in Table 4.2. It is also detailed following the table, in a 
format similar to the HCI specification, see "Part H:1" on page 517. 







0x0000 


Reserved 






0x0002 


L2CA_DisconnectReq 


;^:0x6od3-:|-- 




0x0004 


L2CA_DisableCLT 


:.oxboG5:; {|>v;i^ 




0x0006 


L2CA_GroupCreate 






0x0008 


L2CA_GroupAddMember 


CbcOO(?9: 




OxOOOA 


L2CA_GroupMemebership 






OxOOOC 


L2CA_ReadData 


oxoood; 




OxOOOE 


L2CA_Getlnfo 






0x0010 


Reserved 






0x0012 


Reserved 


:0x00:i3 :. :'$M:^y:^M 




0x0014 -0x03FF 


Reserved 



Table 4.2: Assignment of Opcode Command Field values 



AJIA Connection Establishment 



■ Cbmmandl-;:;- 








L2CA_ConnectReq 


0x0001 


PSM, BD_ADDR 


LCID, Result. Status 
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Descripti n: 

Requests the creation of a channel representing a logical connection to a phys- 
ical address (for more details and input/output parameter definition see Part D / 
Section 7.2 on page 296). 

4.2.2 Connect Response 







CommahdiPa^ 




L2CA_ConnectRsp 


0x0011 


BD_ADDR, Identifier. 
LCID, Response. Status 


Result 



Description: 

Issues a response to a connection request event indication (for more details 
and input/output parameters definition see Part D / Section 7.3 on page 298) 



4.2.3 Connection Release (Disconnect) 









! Return Parcum 


L2CA_DisconnectReq 


0x0002 


CID 


Result 



Description: 



Requests the disconnection of the channel. Input parameter is the CID repre- 
senting the local channel endpoint (for more details and input/output parameter 
definition see Part D / Section 7.6 on page 302). 

4.2.4 Configuration 











L2CA_ConfigReq 


0x0003 


CID, InMTU. OutFlow. 
FlushTO, LinkTO 


Result, InMTU, Out- 
Flow, FlushTO 



Description: 



Requests the initial or new configuration of a channel to a new set of channel 
parameters (for more details and input/output parameter definition see Part D / 
Section 7,4 on page 299). 
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Test Control Interface 

4.2.5 Configur Respons 



Bluetooth. 



Command : 




■■iCoirjninj 




L2CA_ConfigRsp 


0x0013 


CID, OutMTU, InFlow 


Result 



Description: 

Issues a response to a configuration request event indication (for more details 
and input/output parameter definition see Part D / Section 7.5 on page 301). 



4.2.6 Disable Connectionless Traffic 



'':€ommanijj:';:, 








L2CA_DisableCLT 


0x0004 


N, Listof PSMs 


Result 



Description: 

For details and input/output parameter definition see Part D / Section 7.16 on 
page 311. 

4.2.7 Enable Connectionless Traffic 









..Reiiunri:^^ 


L2CA_EnableCLT 


0x0005 


l^, List of PSMs 


Result 



Description: 

For details and input/output parameter definition see Part D / Section 7.17 on 
page 312. 

4.2.8 Group Create 











L2CA_GroupCreate 


0x0006 


PSM 


CID 
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Bluetooth. 

Descripti n: 

Request the creation of a channel identifier to represent a logical connection to 
multiple devices. On creation, the group is empty (for more details and input/ 
output parameter definition see Part D / Section 7.9 on page 305). 

4.2.9 Group Close 



.'Command 






Return Parameters ;.: . ; 


L2CA_GroupClose 


0x0007 


CID 


Result 



Description: 

This command closes down a Group (for more details and input/output param- 
eter definition see Part D / Section 7.10 on page 305). 

4.2.10 Group Add IMember 



^..(^mmairid • • 




: CdmmancI P^metflirs 


; l^tum Paramelars : : 


L2CA_GroupAddMember 


0x0008 


CID, BD.ADDR 


Result 



Description: 

This command adds a member to the group (for more details and input/output 
parameter definition see Part D / Section 7.11 on page 306), 
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4.2.11 Group Remov Memb r 











L2CA_GroupRemoveMember 


0x0009 


CID, BD.ADDR 


Result 



Description: 

Remove a member from the group (for more details and input/output parame- 
ter definition see Part D / Section 7.12 on page 307). 

4.2.12 Group Membership 











L2CA_GroupMembershlp 


OxOOOA 


CID 


Result. N. 
BD_ADDR_Lst 



Description: 

Get report of the members of the group (for more details and input/output 
parameter definition see Part D / Section 7.13 on page 308). 

4.2.13 Ping 



Corrimand : : 








L2CA_Ping 


OxOOOD 


BD_ADDR, ECHO.DATA 


Result, ECHO_DATA 



Description: 

For more details and input/output parameter definition see Part D / Section 
7.14 on page 309. 
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Test Control Interface 



Bluetooth. 



4.2.14 Get Inf 







!; iComma^ M 


(Raturnpara 


L2CA_Getlnfo 


OxOOOE 


BD_ADDR, InfoType 


Result. InfoData 



Description: 

For more details and input/output parameter definition see Part D / Section 
7.15 on page 310. 

4.3 DATA TRANSFER 

Data transfer is modelled with read and write functions. Handling is like an 
L2CAP command. 

To be able to send the amount of data that is needed to verify how the L2CAP 
implementation handles large chunks of data (i.e. segmentation and reassem- 
bly), and since it is not possible to use HCI Command packets as well as HCI 
Event packets to send the data, the use of HCI ACL Data packets will be used. 
The procedure/signalling used on the TCI-L2CAP interface to transfer data 
packets will be described with MSCs. 



4.3.1 Write 







Command'. P 




L2CA_WrlteData 


OxOOOB 


CID, Length, OutBuffer 


Size, Result 



Description: 

Parameters are the CID. the length of the data and the data itself. The data will 
be sent in a HCI ACL data packets as described in Figure 4.2. For more details 
and input/output parameter definition see Part D / Section 7.7 on page 303. 
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Bluetooth. 



Tester 



L2CA_WriteData(CID. Length) 



L2CA_Data(OutBuffer) 



I lUT 



L2CA_WriteData(Size, Result) 



HCI Commaod Packet 

wih C!D arid Length as parameters 



HCI ACL Data Packet 

with Length as Data Total Length 

and OutBufTer as Data 



HCI Conrvnand Complete Event 

with Size and Result as Return Parameters 



Figure 4.2: MSC showing how to write data to L2CAP 



The L2CA_Data primitive is used as an abstract name for the data transmitted 
between the Tester and the lUT. The Tester will use Connection Handle 0x0001 
for the data and will set the Flags-field to 0x02. The Data Total Length field will 
contain the length of the OutBuffer. 

After the lUT has received the data, it shall send back an HCI Command Com- 
plete Event (named L2CAP_WriteData in the figure) with the N parameter set 
to 0x01 , the Opcode parameter set to the con-esponding OCF and subgroup 
(that is OCF = OxOOOB and the subgroup = 0x3E). The Size and Result are 
sent in the Retum_Parameters field of the HCI ACL Data packet. 

4.3.2 Read 











L2CA_ReadData 


OxOOOC 


CID, Length. InBuffer 


Result 



Description: 



Input parameter is the CID. length and the InBuffer. Output parameters are the 
result. The data will be sent in HCI ACL data packets as described in Figure 
4.3. For more details and input/output parameter definition see Part D / Section 
7.8 on page 304). 
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Test Control Interface 



Bluetooth. 



I Tester 



I lUT 



L2CA_ReadData(CID.Length) 



L2CA_Data(lnBuffer) 



L2CA-ReadData(Result) 



HCI Command Packet 

with CID and Length as parameters 



HCI ACL Data Packet 

with Length as Data Total Length 

and InBufferas Data 



HCI Command Complete Event 
with Result as Return.Parameters 



m 



Figure 4.3: MSC showing how to read data from L2CAP 



The L2CA_Data primitive is used as an abstract name for the data transmitted 
between the Tester and the lUT. The lUT shall use Connection Handle 0x0001 
for the data and shall set the Flags-field to 0x02. The Data Total Length field 
shall contain the length of the InBuffer. 

After the lUT has sent the data, it shall send back an HCI Command Complete 
Event (named L2CAP_ Read Data in the figure) with the N parameter set to 
0x01 , the OpCode parameter set to the corresponding OCF and subgroup (that 
is OCF = OxOOOC and the subgroup = 0x3E). The Size and Result are sent in 
the Return. Parameters field of the HCI ACL Data packet. 
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5 ABBREVIATIONS 



FW Firmware 
H\N Hardware 
L2CA Logical Link Control And Management part of the Bluetooth protocol 



LC 



Link Controller (or baseband) part of the 



protocol stack 




mmmm 

MMI Man-Machine Interface 

RF Radio part of the Bluetooth protocol 

. . . , . ■ -.- ■ . ■ .-. . ■ 

sw 

TCI Test Control Interface 

USB Universal Serial Bus 



'4 



■mm ■.m 
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Revision History 



Part A / Radio Specification 



Rey 




■ Comment^': •!.■. ;::;;:;' 


0.8 


Jan 
21st 
1999 


• System ambient temperature range 

• Power control step size 

• Transmit Spectrum mask 

• Frequency drift in a packet 

• New paragraph "Receiver susceptibility to frequency drift" 

• Adjacent interference levels 

• Measurement frequency for intemnodulation test 

• Maximum useable level defined 

• New paragraph "Reference Interference-Signal Definition" 




April;;: : 

:t9p;.;;;; 


. FSSI':BKdudied:!:;;irr"^!-|^^^ '■^■T± C'-) . ^'•J:;>* ^^^;::^;|';.::L 


1.0 
draft 


July 

5th 

1999 


• Appendix A and B added, (extreme conditions definitran and test condi- 
tions) 

• Tolerances of the Eye-diagram added 








Part B / Baseband Specification 








0.7 


Oct 

19th 

1998 


• Minor changes in chapter 1-9. 

• "Link Monitoring" chapter removed (chapter 12 in vO.6). 

• Most parts of chapter 10-14 re-written. 








1.0 
draft 


July 

5th 

1999 


• Please see revision bars in document. 






:Pf:;R^ 
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Part C / Link Manager Protocol 









0.7 


Oct 

19th 

1998 


• BEE address BD_ADDR (or BD address) 

• M_ADDR => AM.ADDR 

• response nbr => PM_ADDR 

• Added section 3.1.4 

• Added section 3.4 "Change the cunrent link key" 

• Changed section 3.5 "Encryption". Added negotiation for encryption mode 
and encryption key size. 

• 3.14 "Sniff mode". Removed author's note in italic. It is now decided how to 
aeiermine cne iirsi snnr sioi. 

• 3.15 "Park mode". This section is totally changed. 

• 3.18 "Quality of Service". Added a parameter Nbc in one of the LMP mes- 
sages. 

o.iy owu/ iiRKs . rtemovea auinor s note in iiaiic. it is now oeciaeci now to 
determine the first SCO slot. 

• Added section 4 "Connection establishmenr 

• 5.1 "Description of parameters" The length, type and unit of many parame- 
ters changed. Especially all time-parameters are now measured in slots. 

• Added sectbn 6 "Test modes" 






. \e^^ i:!:: 






> : . 2; Added.transactiohtDitn bttDof th^ feiytem tfe fiai^^ ;wi hiave the! 

■'!^. : 3u1.2R^ovki^f^^ , 

r ; ; . Sj2; ^tej w ctj^jge^ siryfce;tiie tnftikitcir. erf! ftie p^iwg iproceei^ not have \ \ \ 

f Sy:p^ii^^ : ;.i:.=::;JMij;i:::-l|;:n i;= [■ /ii:;-;;;: !in;:";;;|:H;j::!:: ;y^ M 

^IfiiiSJiSCfe^r^^ 

: : i j : il 9:5 Add4^^ thet tfi^ PDU Indudes a ren^rii panameter : ■ i i i 
niilFlnferir^^ is^nanrioyed 

i:':': separate :chapt^ iR^SM:^^^^ ^^"^Mi'-SK- h- !::•;:'!!!:::: 
^ / ;a«owed totter test;o^^^^ 
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0.9 


April 
30th 
1999 


• Name request procedure: Coding of the characters was changed from 
ASCII to UTF-8. The length of the nam parameter was increased from 1 6 
bytes to 248 bytes. 

• The detach reason and the reason parameter were merged into one 
parameter (reason). The coding of this parameter was changed and Is now 
the same as in HCI. 

• Sniff procedure: Sniff interval and sniff offset parameters were changed 
from one byte to two bytes. Two parameters, sniff offset and sniff timeout, 
were also added. 

• The PDU LMP_slot_offset was added. 

• The PDU LMP_page_mode_req was added. 

• The PDU LMP_page_scan_mode_req was added. 

• Caption text was added to alt figures, tables and sequences where such 
text was missing. 

• A maximum reply time was defined for response messages in LMP proce- 
dures. 

• The pairing procedure was modified to allow a claimant with fixed PIN to 
request to become verifier. 

• Changed some parameters in LMP_test_control to match the latest revi- 
sion of "Bluetooth test modes". 

• The PDU LMP_supervision_timeout was added. 

• The parameter user data rate was removed from the PDU LMP_SCO_link 
request. 

• The length of the parameters Compid and SubVersNr included in the PDU 
LMP_version_req/res was increased to two bytes. 

• Some editorial changes and clarifications were made here and there. 








1.0a 


July 
26th 
1999 


• Conrection of Table 5.3: 

Byte 1/Blt 1 "and power contror deleted 
Byte 2/Bit 2 "power control" added 
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PartD 

Logical Link Contr I and Adaptation Protocol Specification 



Rev: 



Date 



Comtnentsi 



0.8 



Jan 
21st 
1999 



Changes include the addition of an operational overview section, increas- 
ing CID lengths to 1 6 bits and removing the source CID from nonmal data 
flow. Moved all connection, termination, and configuration commands to a 
separate "CID". Changed the name of the "Connection ID" to the "Channel 
ID". 

Added the state machine 

Re-defined the timers to more cleariy indicate their responsibilities. New 
Flags field in Configuration Request packet defined. 
Several minor editorial corrections. 



0v9:;: 



AfMTil:- 
30th ^ 



1.0 
draft 



July 

5th 

1999 



Replaced all references to "tenmination" with "disconnection". KTX timer 
removed - link loss results in channel loss. OS! naming temns applied to 
state machine. State machine table revised to remove superfluous states. 
Added some message sequence charts for clarification. Service interface 
defined In more detail and no tonger specified as a guideline - this interface 
still needs work to complete. 

Service Interface revised con-ectior^ to state machine added, and security 
key management removed firom service interface. 
Editorial cleanup of various sections with the majority of the edits being in 
the state machine and service interface. 

Added L2CA_Response service primitives. Clean up of state machined, 
closed outstanding issues dealing with MTU, 

Implements major editorial changes to the conflguratron process (section 
6.3), replacing SCID and DCID with RCID and LCID, removal of flush sig- 
nalling PDU, and editorial comments from reviewers. 



1:08- 



Decii: 



i .Rev^iad: jrpm a .lingu^ 

: £n^; .^erlts {KBi^pusty. pubiisfiped 6n ttie; web' ir^ : bei^rii indud^ : : : : 1 ; 
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Part E / Service Discovery Protocol (SDP) 









1.0 
draft 


July 

5th 

1999 


• Removed the Iconi 0 attribute and the Icon data element type. Re- 
assigned tne iconUKL attnoute ID to be OxOOOC. Updated Example 3. 
Removed "notes to reviewers". Removed the list of TBD items, since it is 
empty. 

• A few corrections to example 3. Modified the BluetoothProfileList attribute 
to become the BluetoothProfileDescriptori_ist attribute, which contains a 
version number for each profile as well as the profile's UUID 

• Added a description of the protocol version number included in the Blue- 
toothProfileDescriptorList attribute. No change to the 'phonebook* and 'cal- 
endar* data store indicators as the values in example 3 already match those 
of the synchronization profile. Replaced the browse hierarchy diagram in 
2.8.1 because the previous version triggered a bug in MS-Word. 


Part 


F:1 /R 


FCOMM With TS 0710 








0.8 


Jan 
21st 
1999 


• Table 2. 1 conrected. 

• Revised section 2.3. 

• Revised chapter 3. 

• Revised section 5.2, 5.3. 

• Clarifications added to Figure 5. 1 . 

• Changed title and contents of section 5.4 (old section 5.4 not needed any 
more). 

ICAl ICIIIWCU liUIII oCLfllUil dllU 

• Added text on Service Discovery in section 7.3. 


€.9 • 




: ; ;:: iAd|i|^ i^ion^^ ^^ui^i^^^^^^M MM^^i^fS 


1.0 
draft 


July 

5th 

1999 


• Editorial changes and clarificatrons in chapters 5 and 7. 

• Removed sections implying possibility to have more than one RFCOMM 
entity in a device. 




bee::-':- -1 

:isi:':::-.''; 
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Part F:2 / IrDA Interoperability 



Bluetooth. 









0.9 


April 
30th 
1999 


• Many linguistlcal changes made. Bluetooth OBEX related specrfications 
chapter added, Separate Application profile chapters gathered into one 
chapter, OBEX operation requirennents moved into the profile specifica- 
tions, Refers to COMM-ports removed. 

• Service Records moved into the profile specifications, and added clarifica- 
tion for the use of connection-oriented OBEX 


■rM 

draft • 


: July.^' .;. 
•5lh ':!■'■; 
:; 1999^!^ '* 




I.OB 


Dec 

1st 

1999 


• Revised from a linguistic point of view. 


Part F:3 / Telephony Control Specification (TCS) 


: ReV:: 


; Date;:;! =: 


ComrrionlS ■ :-y-<}^ :L.'- i;::;. * ;:;:-^ • '-''S '•^'^''^y ' '\-k'' 


1.0 
draft 


July 

5th 

1999 


• Version for 1 .0 Release, only editorial changes since 0.9 










iiii99^j;V: 




Part F:4 

Interoperability Requirements for Bluetooth as a WAP Bearer 




batft'-i-:;^ 




I.OB 


Dec 

1st 

1999 


• Revised from a linguistic point of view. 
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Part H:1 

Bluetooth Host C ntroller Interface Functional Specification 



0.8 



Jan 
21st 
1999 



Many editorial corrections 



1.0 
draft 



July 

5th 

1999 



Flow control for data changed. 

Fomnat of HCI Data Packet header changed. 

Command Pending Event replaced by Command Status Event and func- 
tbnality regarding which event should be returned when a command 
involving LMP actions can not start to execute due to an error changed. 
Some commands and events have been renamed. 
Changed parameters, descriptions and functionality for many commands 
and events. 

Many new commands have been added. 

HCI_Store_Clock_Offeet command has been removed. This Infomnation is 
now provided at connection set up or name request as a parameter 
together with other new baseband related parameters. 
Some new events have been added. 
Descriptions of error codes added. 



1.DB 



Part H:2 / HCI USB Transport Layer 









0.8 


Jan 
21st 
1999 


• Added info about 64 byte isochronous endpoints. 

• Added a section detailing one of the mail messages - that discussed how 
SCO traffic would travel across the interface 




April : i : J 




1.0 
draft 


July 

5th 

1999 


• Updated endpoint Infomnation, interface infomnatton relating to isoch, and 
Device Finmware Upgrade Requirements 

• Tidied up table describing interface/end point/altemate setting infbrmatbn 


iiB- 


III 
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Part H:3 / HCI RS232 Transport Layer 



Bluetooth. 









0.9 


April 
30th 
1999 


• Assumption about error free link has been removed. 

• A simple enror recovery, negotiation scheme and a resynchronisatbn/error 
indication scheme using RTS/CTS were added as proposed by IBM. 

• New document outline. 

• Added synchronisation using delimiters with COBS. 

• Added a support for CCITT-CRC. 

• Only 8 bit data length ts valid. 

• HCI Event packet type is added. 

• Available error type has been modified. 

• Editorial changes. 












♦ • Addeipasuf^KMrtforCGI^ 

;=»:;''yUfaiybfe iRate:Q^|nged;::^;;.^7^^ 

6^it^4sk^i^r^ ::-'V::!i^ 

\* ' HC^ £vent pcTCkje^ 
;=r;;: Ayaiiablee^^ 

^ga^fcitot o^ /: % • \ . f^^^. 


I.OB. 


Dec 

1st 

1999 


• Revised from a linguistic point of view. 


PartH:4 

HCI UART Transport Layer 




[ifk'te^ ■■■■■ 




0.9 


April 
30th 
1999 


• was not a part of 0.8 

• First revision. Based on HCI RS232 Transport Layer 0.80. 

• Added Default Settings. HW flow control and Ennor Recovery. 

• Improved description of RTS/CTS 

• Changed HCI packet indicator for HCI event packet 


:<iraft:i 






1,0B 


Dec 

1st 

1999 


• Revised from a linguistic point of view. 
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Part 1:1 / Test Mode 



Bluetooth. 



Comments 



0.9 



April 
30th 
1999 



Transmitter Test: added pseudorandom bit sequence 
Con'esponding changes for LMP messages 
Editorial Changes: 

Explanatory paragraph and figure added to the test packet fomnat of the 
transmitter test 

Proposal of a loopback alternative that has less demanding time con- 
straints. 

Reduced Hopping Sequence added 
Modification/Clearification of TX packet fomnat 
Editorial changes 

Statement in Introduction that test mode may be used also for regulatory 
approval. 

Description of delayed toopback added 

proposed timing for reduced hopping scheme from Ericsson 

timing for reduced hopping scheme refined 

Loopback: transmission of NULL packet on failed HEC is not mandatory. 
Added AUX1 packet explicitely to Figure 3 
Included AUX1 to Table 3 

Mentioned delayed loopback in first paragraph of Section 2.2 

Features request command is allowed, while in test mode. 

Added codes for LMP packets according to LMP V0.9 review document 

Changed maximum packet length in Table 3 

FH timing: clearify that clock of tester is used 

editorial changes 

Clearifications about Whitening for both TX and Loopback mode 
Clearification that RX and TX in the control command refer to the DUT. 
Clearification in Table 3: For ACL packets a maximum length is given, for 
HV3 the exact length is given. 
Editorial Changes 



MM 

;;cteaft;: 



5th::::. 

Mm 




1.0B 



Dec 

1st 

1999 



Revised from a linguistic point of view. 

Errata items previously published on the web has been included. 
These corrections and clarificatrons are mariced with correctbn bars. 



Part 1:2 Bluetooth Compliance Requirements 



R6V 


;=J5^::. 








• The text in Sectbn 6.6.1 "Definition of Bluetooth components" first para- 


1.0A 


26th 


graph has been revised. 




1999 






i!^G©ci:;i^::;^ 


::|>|j;;;|^iS^ 
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Part 1:3 Test Control Interface 







■:Cpmri^entS:::-^ --^^ -k: .:.:::•:■/:*; ■: --^^ J-^- !.i::V- J-.h"-;: '•Li-i:^:':::;:*'.:* 


1.0B 


Dec 

1st 

1999 


• Revised from a linguistic point of view. 


Appendix IV / Sample Data 


:Rey:;j 






I.OB 


Dec 

1st 

1999 


• Revised from a linguistic point of view. 


Appendix V / Bluetooth Audio 




Miiiii 




1.0B 


Dec 

1st 

1999 


• Revised from a linguistic point of view. 


Appendix VI / Baseband Timers 


Rev 






I.OB 


Dec 

1st 

1999 


• Revised from a linguistic point of view. 

* Enrata items previously published on the web has been included. 
These connections and clarifications are marked with connection bars. 


Appendix VII /Optional Paging Scheme 


RfiFV 


:-piafe::;:;' 




I.OB 


Dec 

1st 

1999 


• Revised from a linguistic point of view. 



Appendix VIII / Bluetooth Assigned Numbers 







^C0n^^ --Z^:. '^W- \ v-'--\2: 


1.0 
draft 


July 

5th 

1999 


• Renamed some of the service class mnemonics. Added a bit to indicate if a 
node is in Limited Discoverable Mode (useful In a reply to GIAC). 

• Updated after review. Added the lAC LAP codes. 

• Minor editoral and clarifications, including section "Universally Unique Iden- 
tifier (UUID) short forms". 




• 'Dec' 

.isf-ii^ix:-; 

r!1999-;:: 
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Appendix IX / Message Sequence Charts 



Bluetooth. 



Rev 



1.0 
draft 



July 

5th 

1999 



• Command and Parameter updated; Chapter 7 added; Local- and Remote 
Hold-Mode removed; Chapter 8 clarified; No HCI-Num-Completed-Pack- 
ets-Event in ACL- and SCO-Connection creation; LMP-feature-req/-res 
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Appendix in. Acronyms BlUetOOtH. 

List of Acronyms and Abbreviations 







abbreviation 


Writing out In full 


^-:ACK^^rA^^ 




ACL link 


Asynchronous Connection-Less 


link 


>?^co 

AM_ADDR 


:\:iAuthefifi 

Active Member Address 


ARQ 


Autonnatic Repeat reQuest 






BB 


BaseBand 






BD.ADDR 


Bluetooth Device Address 


BER: 


^BftEfrorRate. 


BT 


Bandwidth Time 


□ 1 


otuetoom 


c 




•CAC- i; 


Chahriel AcceM. Code . 


CC 


Call Control 


GL--:-,- r ' ■ 


'•' ; Gpnn4ct(€)!>l^ 


CODEC 


coder DECoder 


CRC 


•■'li^lictpherin^^^ 
Cyclic Redundancy Check 






D 




Ba^^ 




DCE 


Data Communication Equipment 



Which means 



Provides a packet-switched con- 
nection.(Master to any slave) 



: Th^ pisrsorts Who di^bb*^^^ 

: codes ja: 1959 ;{K) 4960:(8fi^^ 
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Bluetooth. 



Acronym r 
abbreviation 

DCE 



DCI 

DIAC 

-■-DM 'I 
DTE 

DTMF 

DUT 

E)V 

E 

ETSf ; 
F 

FCP.^.J 
FEC 

FHS 
FIFO 
FSK 

G 

GEOP 
GFSK 

GM 



Writing ut in full 

Data Circuit-Terminating Equip- 
ment 



Default Checl< Initialization 
Data-High Rate 

Dedicated Inquiry Access Code 
:t>ata.;^'M|3iurn^^ ■ 
Data Terminal Equipment 



vf^feqiiency:>: di'P'^- 
Device Under Test 



European Telecbnimu^^ 
Stanidapdsinstf&te- i:M 



■Coiim 

Forward En^or Correction code 
Frequency Hop Synchronization 
Frequency Shift Keying 

Gjeneiic^ ObjectExphar^ 
Gaussian Frequency Shift Keying 

Group Management 



Which means 

: : In : asirjat coimmunicatip DCE .-0 
'■ 'ijefeirsiito; a::d i- M ■ 

cbmmun^ 

;i^featipri5- propel 
' 'modeirn . 



Ipate j^Ki^ highf rate data. 



' fiiate p^t^^ rnieikijrrt 



In serial communications, DTE 
refers to a device at the endpoint 
of the communications path; typi- 
cally a computer or terminal. 



type of modulation 
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Bluetooth. 



Acronym or 
abbreviation 



Writing out In fuii 



HA 


Ho^t Annlinptrnn 




v : Host Controller interface : ■ 


HEC 


Header-Error-Check 


HID j ; 


■ Htffiian interface Oevice . 


HV 


High quality Voice 


■Hw;:;----} 






liiquiry^ Ac^^ Cdde|;\:}:;:!J:;;.'^^^ 




Institute of Electronic and Electrical 




Engineering 


■IETF.- 


; ; Uj Intef^et Engineering :i>$k: Forte; ^^^^ 


\P 


Internet Protocol 




\fl • tnfifa^red' AssodatJb^ .;; 


mc 


Ir Mobile Communications 








•* : ^ \i/fwir-e V-*^^^^^^^^ .-'V*:-"!" .*•.•*:•- , 


ISM 


Industrial, Scientific, Medical 


;juT"3-;:;^3: 


-IJ^:. • • Infipiorjientetlb U ndernfei^ : . 


L 






v Logicat C^ 


L2CA 


Logical Link Control and Adaption 




■ ; ■ tiogicaf Lj nk-.iCp^^ : /ufeptionii: 




^ |i ii!;Pr6topbili|^ 3 ^-M- ivy '* *; ■ " ix-- ; ' 


LAP 


Lower Address Part 
:y . ■ :■ U n CofttrpI ief ; ':: :;'f ',, : : - r l?)^; . ' 


LCP 


Link Control Protocol 




|Ltnk:Cp S€ryi»:Signalilri^ 


LFSR 


Linear Feedback Shift Register 







Wlii h means 



SW using Bluetooth 



e.g. HV1 packet 



Logical Link Control And Manage- 
ment part of the Bluetooth protocol 
stack 



I'bf the.B^ protocol stec i. 

;:Lowi^^^^ 
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Bluetooth. 



Acr nymor 
abbrevlati n 

LMP 

tSB v:'; 
M 

M_ADDR 

MAC-VZ-l/v 

MAPI 

MS 

-:MS:,.; 
MSB 

MSG. 

MTU 

.MUX ■'/x;^;! ■ ■■ 
N 

NAP 

o 

OCF 
P • 
PCM 

PCMOA v: : 

PDU 

Pl^l;:.- 
Pf^_ADDR 

PH i 
PnP 
POTS 



Writing out In full 

Link Manager Protocol 
L^a^' Sionlftdaiit :Bit:: ; : v 



Which m ans 

For LM peer to peer communica- 
tion 



Mas)^ or Mandato)^ 

Medium Access Control Address 

Messaging Application Procedure 
Interface 

Mih;Pi|achin©irvt^ V 
Mobile Station 
■■ Myittpiiex?rig;si4bl|^ 
Most Significant Bit 
Messatge 3eq 

Maximum Transmission Unit 

■■■■Multfp||i2^ $ubiai^:<^ 

Negi^tiye-Acknowted 
Non-significant Address Part 

Optional 

: d&iei& 

Opcode Command Field 
Pulse Coded Modulation 

Protocol Data Unit 
: Pef^soraj : 1^ 
Parked Member Address 

. P$iGiu||p'rrarifdOT^^^ 
Plug and Play 



a message 
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Acronym r 

abbreviation Writing ut In f uit 



Bluetooth. 



Which means 



PPM 



Part Per Million 



PRBS 



Pseudo Random Bit Sequence 

pgyi^ Public Switched Telephone Net- 

work 

QoS Quality of Service 

RAND Random number 

RFC Request For Comments 



RSSI 



Received Signal Strength Indica- 
tion 



mm 



V:::-;:V 




SCO link Synchronous Connection-Ori- Supports time-bounded informa- 

ented link tion like voice, 

(Master to single slave) 




Service Discovery Database 

iNumoering scneme 
H^il^espb^ 



iff -1 



Supplementary Services 



SUT System Under 
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Bluetooth. 



Acr nym r 
abbrevlati n 

TAE 

TC 

TCP/IP 

TDD 

TX 
UA 

UART 

UDP/IP 

UIAC 
USB 

w 

WUG 



Writing out In full 

Temnlnal Adapter Equipment 
Test Control 

Transport Control Protocol/Inter- 
net Protocol 

! tetephoriy Cb 

Time-Division Duplex 

:bi3E)C;and-UpF[^^ 
Transmit 

User Asynchronous 

lUpper-i^dre^Pa^^^^ 

Unlversial Asynchronous receiver 
Transmitte 

User Datagram Protocol/Internet 
Protocol 

vUssrlisQch 

Unlimited Inquiry Access Code 
.■User S^n^^ • 
Universal Serial Bus 

Wireless User Group 



Which means 



Test Control layer for the test inter- 
face 



Asynchronous user data 



f sbchroMiK;;^!^ diata; 



^fK^npu^iii^ef: M 
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Definitions 



Baseband. The Bluetooth baseband specifies the medium access and physi- 
cal layers procedures to support the exchange of real-time voice and data 
information streams and ad-hoc networking between Bluetooth units. 

Coverage area . The area where two Bluetooth units can exchange mes- 
sages with acceptable quality and performance. 

Host Terminal interface. Host temninal interface is the Interface between 
Bluetooth Host and Bluetooth Unit. 

Inquiry. A Bluetooth unit transmits inquiry messages in order to discover the 
other Bluetooth units that are active within the coverage area. The Bluetooth 
units that capture inquiry messages may send a response to the inquiring 
Bluetooth unit. The response contains information about the Bluetooth unit 
itself and its Bluetooth Host, 

isochronous user channel . Channel used for time bounded information like 
i.e. compressed audio (ACL link). 

Logical Channel. The different types of channels on a Physical Link. 

Bluetooth Host. Bluetooth Host is a computing device, peripheral, cellular 
telephone, access point to PSTN network, etc. A Bluetooth Host attached to a 
Bluetooth unit may communicate with other Bluetooth Hosts attached to their 
Bluetooth units as well. The communication channel through the Bluetooth 
units provides almost wire-like transparency. 

Bluetooth Unit. Bluetooth Unit is a voice/data circuit equipment for a short- 
range wireless communication link. It allows voice and data communications 
between Bluetooth Hosts. 

Bluetooth. Bluetooth is a wireless communication link, operating in the unli- 
censed ISM band at 2.4 GHz using a frequency hopping tranceiver. It allows 
real-time voice and data communications between Bluetooth Hosts. The link 
protocol is based on time slots. 

Packet. Format of aggregated bits that can be transmitted in 1 . 3, or 5 time 
slots. 

Paging. An Bluetooth unit transmits paging messages in order to set up a 
communication link to another Bluetooth unit who is active within the cover- 
age area. 
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Bluetooth. 



Physical Channel. Synchronized RF hopping sequence in a piconet 
Physical Link. Connection between devices. 

Piconet. In the Bluetooth system, the channel is shared among several Blue- 
tooth units. The units sharing a common channel constitute a piconet, 

RFCOIMIVI Client. An RFCOMM client is an application that requests a con- 
nection to another application (RFCOMM server). 

RFCOMM initiator. The device initiating the RFCOMM session, i.e.setting up 
RFCOMM channel on L2CAP and starting RFCOMM multiplexing with the 
SABM command on DLCI 0 (zero), 

RFCOMM Server. An RFCOMM server Is an application that awaits a con- 
nection from an RFCOMM client on another device. What happens after such 
a connection is established is out of scope of this definition. 

RFCOMM Server Channel. This is a subfield of the TS 07.10 DLCI number. 
This abstraction is used to allow both server and client applications to reside 
on both sides of an RFCOMM session. 



Service Discovery. The ability to discover the capability of connecting 
devices or hosts 



Scatternet. Two or more piconets co-located in the same area (with or witout 
inter-piconet communication). 

Time Slot. The Physical Channel is divided into 625 ms long time slots. 
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Thispppencix contains sample data for 
varic|is parti of the Bluetooth baseband spec- 
ification. All sample data are provided for 
referlnce pifpose only; they are intended as a 
conrwlemenf to the definitions provided else- 
wh#e in the specification. They can be used 
to jiheck the behavior of an implementation 
aifd avoidpiisunderstandings. Fulfilling these 
ample dlta is a necessary but not sufficient 
conditkm for an implementation to be fully 
BlueUroth compliant. 
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9.3 Three Tests of E22 968 

9.4 Tests of E22 With Pin Augmenting 970 

9.5 Four Tests of E3 980 



29 November 1999 



901 



BLUETOOTH SPECIFICATION Version 1.0 B 



page 902 of 1082 



Appendix IV - Sample Data 

1 ENCRYPTION SAMPLE DATA 



This part consist of four sets of sample data for the encryption process. 

With respect to the functional description of the encryption engine in the Blue- 
tooth baseband specification, the contents of registers and resulting concurrent 
values are listed as well. This by no means excludes different implementations 
(as far as they produce the same encryption stream) but is intended to 
describe the functional behavior. 

In case of misunderstandings or inconsistencies, these sample data form the 
normative reference. 



1.1 GENERATING KC FROM KC, 

where Kc'(x) = g2(x)(Kc(x) mod g1(x)). 

Note: All polynomials are in hexadecimal notation. 
' h' is the effective key length in bytes. 
The notation 'p: tm] ' implies that deg{ptx)) = m. 



MSB LSB 

L = 1 

gl: [8J 00000000 00000000 00000000 OOOOOlld 

g2: [119] 00e275a0 abd218d4 cf928b9b bf6cb08f 

Kc: a2b230a4 93f281bb 61a85b82 a9d4a30e 

Kc mod gl: [7] 00000000 00000000 00000000 0000009f 

g2 CKc mod gl) : [126] 7aal6f39 59836ba3 22049a7b 87fld8a5 



L = 2 

gl: [16] 00000000 00000000 00000000 0001003f 

g2: [112] 0001e3f6 3d7659b3 7fl8c258 cfffiefef 

Kc: 64e7df78 bb7ccaa4 61433123 5b3222ad 

Kc mod gl: [12] 00000000 00000000 00000000 OOOOlffO 

g2 (Kc mod gl) : [124] 142057bb 0bceac4c 58bdl42e Ie710a50 



L = 3 

gl: [24] 00000000 00000000 00000000 OlOOOOdb 

g2: [104] OOOOOlbe f66c6c3a bl030a5a 1919808b 

Kc: 575e5156 ba685dc6 112124ac edb2cl79 

Kc mod gl: [23] 00000000 00000000 00000000 008ddbc8 

g2 (Kc mod gl) : [127] d56d0adb 8216cb39 7fe3c591 Iff 95618 



L = 4 

gl : [32] 00000000 00000000 00000001 OOOOOOaf 

g2 : [96] 00000001 6ab89969 del7467f d3736ad9 

Kc: 8917b4fc 403b6db2 1596b86d IcbSadab 

Kc mod gl: [31] 00000000 00000000 00000000 aale78aa 

g2(Kc mod gl) : [127] 91910128 b0e2f5ed al32a03e af3d8cda 
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L s 5 

gl: [40] 00000000 00000000 00000100 00000039 

g2: [88] . 00000000 01630632 91daS0ec 55715247 

Kc: 785c915b dd25b9c6 0102ab00 b6cd2a68 

Kc mod gl: [38] 00000000 00000000 0000007f 13d44436 

g2tKc mod gl) : [126] 6fb5651c cb80c8d7 ealee56d flec5d02 

L = 6 

gl: [48] 00000000 00000000 00010000 00000291 

g2: [77J 00000000 00002c93 52aa6ccO 54468311 

Kc: 5e77dl9f 55ccd7d5 798f9a32 3b83e5d8 

Kc mod gl: [47] 00000000 00000000 000082eb 4af213ed 

g2(Kc mod gl) : [124] 16096bcb afcf8def ld226alb 4d3f9a3d 
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L = 7 

gl J E56] 00000000 00000000 01000000 00000095 

g2: [71] 00000000 000000b3 f7fffce2 79f3a073 

Kc: 05454e03 Sddcfbe3 ed024b2d 92b7f54c 

Kc mod gl: [55] OOOOOOOO OOOOOOOO 0095b8a4 8eb8l6da 

g2 (Kc mod gl) : [126] 50f9c0d4 e3178da9 4a09fe0d 34f67b0e 

L = 8 

gl: [64] OOOOOOOO 00000001 OOOOOOOO OOOOOOlb 

g2: [63] OOOOOOOO OOOOOOOO alab815b c7eca025 

Kc: 7cel49fc f4b38ad7 2a5dSa41 ebl5ba31 

Kc mod gl: [63] OOOOOOOO OOOOOOOO 8660806c 1865deec 

g2 (Kc mod gl) : [126] 532c36d4 5d0954e0 922989b6 826f78dc 

L = 9 

gl: [72] OOOOOOOO 00000100 OOOOOOOO 00000609 

g2: [49] OOOOOOOO OOOOOOOO 0002c980 Ild8b04d 

Kc: 5eeff7ca 84fc2782 9c051726 3df6f36e 

Kc mod gl: [71] OOOOOOOO 00000083 58ccb7d0 b95d3c71 

g2(Kc mod gl) : [120] 016313f6 0d3771cf 7f8e4bb9 4aa6827d 

L = 10 

gl: [80] OOOOOOOO OOOIOOOO OOOOOOOO 00000215 

g2: [42] OOOOOOOO OOOOOOOO 0000058e 24f9a4bb 

Kc: 7bl3846e 88beb4de 34e7160a fd44dc65 

Kc mod gl: [79] OOOOOOOO 0000b4de 34171767 f36981c3 

g2 (Kc mod gl) : [121] 023bclec 34a0029e f798dcfb 618ba58d 

L = 11 

gl: [88] OOOOOOOO 01000000 OOOOOOOO 0000013b 

g2 : [35] OOOOOOOO OOOOOOOO 0000000c a76024d7 

Kc: bda6de6c 6e7d757e 8dfe2d49 9al81193 

Kc mod gl: [86] OOOOOOOO 007d757e 8dfe88aa 2fcee371 

g2 (Kc mod gl) : [121] 022e08a9 3aa51d8d 2f93fa78 85cclf87 

L = 12 

gl: [96] 00000001 OOOOOOOO OOOOOOOO OOOOOOdd 

g2: [28] OOOOOOOO OOOOOOOO OOOOOOOO Ic9c26b9 

Kc: e6483blc 2cdbl040 9a658f97 c4efd90d 

Kc mod gl: [93] OOOOOOOO 2cdbl040 9a658fd7 5b562e41 

g2tKc mod gl) : [121] 030d7S2b 216fe29b b880275c d7e6f6f9 

L = 13 

gl: [104] 00000100 OOOOOOOO OOOOOOOO. 0000049d 

g2: [21] OOOOOOOO OOOOOOOO OOOOOOOO 0026d9e3 

Kc: d79d281d a2266847 6b22 3c46 dc0ab9ee 

Kc mod gl: (100] OOOOOOld a2266847 6b223c45 elfc5fa6 

g2 (Kc mod gl) : [121] 03f 11138 9cebf919 00b93808 4acl58aa 
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Bluetooth. 



L = 14 

gl: [112] 00010000 00000000 00000000 O000014f 

g2: [14] 00000000 00000000 00000000 00004377 

Kc: cad9a65b 9fcalcld a2320fcf 7c4ae48e 

Kc mod gl: [111] 0'000a65b 9fcalcld a2320fcf 7cb6a909 

g2{Kc mod gl) : [125] 284840fd fl305f3c S29f5703 76adf7cf 

L = 15 

gl: [120] 01000000 00000000 00000000 00000067 

g2: [7] 00000000 00000000 00000000 00000089 

Kc: 21f0cc31 049b7163 d375e9el 06029809* 

Kc mod gl: [119] 00f0cc31 049b7l63 d375e9el 06028406 

g2(Kc mod gl) : [126] 7fl0b53b 6df84b94 f226566a 3754a37e 

L * 16 

gl: [128] 00000001 00000000 00000000 00000000 00000000 

g2: [0] 00000000 00000000 00000000 00000001 

Kc: 35ec8fc3 d50ccd32 5f2fd907 bd6206d6 

Kc mod gl: [125] 35ec8fc3 dS0ccd32 5f2fd907 bde206de 

g2(Kc mod gl) : [125] 35ec8fc3 dS0ccd32 5f2fd907 bd6206d6 



1 .2 FIRST SET OF SAMPLE DATA 



Initial values for the key, pan address and clock 

K'Cl[0] = 00 K'Cltl] > 00 K'Clt2] » 00 K'Cl[3] = 00 

K'Cl[4] = 00 K'ClCSj = 00 K'Cl[6] = 00 K'Cl[7] = 00 

K'ClES] = 00 K;c1[9] = 00 K'C1[101 = 00 K'Cltll] - 00 

K'Cl[12] « 00 K'Cl[13] = 00 K'cl[14j = 00 IC'cl[l5] = 00 

AddrlCO] = 00 Addrltl] = 00 Addrlt2] = 00 

Addrl[3l - 00 Addrl[4] - 00 Addrl [5] - 00 

Clkl[0] - 00 Clkl[I] - 00 Clkl[2] = 00 Clkl[3] - 00 



Pill LFSRs with initial data 



t 


clk» 


LFSRl 


LFSR2 


LFSR3 


LFSR4 


XI 


X2 


X3 


X4 


z 


C[t*l] 


C[t] 


C[t 


0 


0 


0000000* 


00000000* 


000000000* 


0000000000* 


0 


0 


0 


0 


0 


00 


00 


00 


1 


1 


0000000* 


00000001* 


000000000* 


0000000001* 


0 


0 


0 


0 


0 


00 


00 


00 


2 


2 


0000000* 


00000002* 


000000000* 


0000000003* 


0 


0 


0 


0 


0 


00 


00 


00 


3 


3 


0000000* 


00000004* 


000000000* 


0000000007* 


0 


0 


0 


0 


0 


00 


00 


00 


4 


4 


0000000* 


00000008* 


000000000* 


OOOOOOOOOE* 


0 


0 


0 


0 


0 


00 


00 


00 


5 


5 


0000000* 


00000010* 


000000000* 


OOOOOOOOIC* 


0 


0 


0 


0 


0 


00 


00 


00 


6 


6 


0000000* 


00000020* 


000000000* 


0000000038* 


0 


0 


0 


0 


0 


00 


00 


00 
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7 


7 


0000000* 


00000040* 


000000000* 


0000000070* 


0 


0 


0 


0 


0 


00 


00 


00 


B 


8 


0000000* 


00000080* 


000000000* 


OOOOOOOOEO* 


0 


0 


0 


0 


0 


00 


00 


00 


9 


9 


0000000* 


00000100* 


OOOOOODOO* 


OOOOOOOICO* 


0 


0 


0 


0 


0 


00 


00 


00 


10 


10 


0000000* 


00000200* 


OOOOOOOOO* 


0000000380* 


0 


0 


0 


0 


0 


00 


00 


00 


11 


11 


0000000* 


00000400* 


OOOOOOOOO* 


0000000700* 


'o 


0 


0 


0 


0 


00 


00 


00 


12 


1 2 


0000000* 


nonoofloo* 


OOOOOOOOO* 


OOOOOOOHOO* 


0 


0 


0 


0 


0 


00 


00 


00 


13 


13 


0000000* 


00001000* 


OOOOOOOOO* 


OOOOOOICOO* 


0 


0 


0 


0 


0 


00 


00 


00 


14 


14 


0000000* 


00002000* 


OOOOOOOOO* 


0000003800* 


0 


0 


0 


0 


0 


00 


00 


00 


15 


15 


0000000* 


00004000* 


OOOOOOOOO* 


0000007000* 


0 


0 


0 


0 


0 


00 


00 


00 


16 


16 


0000000* 


00008000* 


OOOOOOOOO* 


OOOOOOEOOO* 


0 


0 


0 


0 


0 


00 


00 


00 


17 


17 


0000000* 


00010000* 


OOOOOOOOO* 


OOOOOICOOO* 


0 


0 


0 


0 


0 


00 


00 


00 


13 


18 


0000000* 


00020000* 


OOOOOOOOO* 


0000038000* 


0 


0 


0 


0 


0 


00 


00 


00 


19 


19 


0000000* 


00040000* 


OOOOOOOOO* 


0000070000* 


0 


0 


0 


0 


0 


00 


00 


00 


20 


20 


0000000* 


00080000* 


OOOOOOOOO* 


OOOOOBOOOO* 


0 


0 


0 


0 


0 


00 


00 


00 


21 


21 


0000000* 


00100000* 


OOOOOOOOO* 


OOOOICOOOO* 


0 


0 


0 


0 


0 


00 


00 


00 


22 


22 


0000000* 


00200000* 


OOOOOOOOO* 


0000380000* 


0 


0 


0 


0 


0 


00 


00 


00 


23 


23 


0000000* 


00400000* 


OOOOOOOOO* 


0000700000* 


0 


0 


0 


0 


0 


00 


00 


00 


24 


24 


0000000* 


00800000* 


OOOOOOOOO* 


OOOOEOOOOO* 


0 


1 


0 


0 


1 


00 


00 


00 


25 


25 


0000000* 


01000000* 


OOOOOOOOO* 


OOOICOOOOO* 


0 


0 


0 


0 


0 


00 


00 


00 


26 


26 


0000000 


02000000* 


OOOOOOOOO* 


0003800000* 


0 


0 


0 


0 


0 


00 


00 


00 


27 


27 


0000000 


04000000* 


OOOOOOOOO* 


0007000000* 


0 


0 


0 


0 


0 


00 


00 


00 


28 


28 


0000000 


08000000* 


OOOOOOOOO* 


OOOEOOOOOO* 


0 


0 


0 


0 


0 


00 


00 


00 


29 


29 


0000000 


10000000* 


OOOOOOOOO* 


OOlCOOOOOO* 


0 


0 


0 


0 


0 


00 


00 


00 


30 


30 


0000000 


20000000* 


OOOOOOOOO* 


0038000000* 


0 


0 


0 


0 


0 


00 


00 


00 


31 


31 


0000000 


40000000* 


OOOOOOOOO* 


0070000000* 


0 


0 


0 


0 


0 


00 


00 


00 


32 


32 


0000000 


00003001 


OOOOOOOOO* 


OOEOOOOOOO* 


0 


0 


0 


1 


1 


00 


CO 


00 


33 


33 


0000000 


00000002 


OOOOOOOOO* 


OICOOOOOOO* 


0 


0 


0 


1 


1 


00 


00 


00 


34 


34 


0000000 


00000004 


OOOOOOOOO 


0380000000* 


0 


0 


0 


1 


1 


00 


00 


00 


35 


35 


0000000 


00000008 


OOOOOOOOO 


0700000000* 


0 


0 


0 


0 


0 


00 


00 


00 


36 


36 


0000000 


00000010 


OOOOOOOOO 


OEOOOOOOOO* 


0 


0 


0 


0 


0 


00 


00 


00 


37 


37 


0000000 


00000020 


OOOOOOOOO 


ICOOOOOOOO* 


0 


0 


0 


0 


0 


00 


00 


00 


38 


38 


0000000 


00000040 


OOOOOOOOO 


3800000000* 


0 


0 


0 


0 


0 


00 


00 


00 


39 


39 

= = = = = 


0000000 


00000080 


OOOOOOOOO 


7000000000* 


0 


0 


0 


0 


0 


00 


00 


00 




St 


art clocking Summation Combiner 




===== 














===== 


40 


1 


0000000 


00000100 


OOOOOOOOO 


6000000001 


0 


0 


0 


0 


0 


00 


00 


00 


41 


2 


0000000 


00000200 


OOOOOOOOO 


4000000003 


0 


0 


0 


0 


0 


00 


00 


00 


42 


3 


0000000 


00000400 


OOOOOOOOO 


0000000007 


0 


0 


0 


0 


0 


00 


00 


00 


43 


4 


0000000 


00000800 


OOOOOOOOO 


OOOOOOOOOE 


0 


0 


0 


0 


0 


00 


00 


00 


44 


5 


0000000 


00001001 


OOOOOOOOO 


OOOOOOOOID 


0 


0 


0 


0 


0 


00 


00 


00 


45 


6 


0000000 


00002002 


OOOOOOOOO 


000000003B 


0 


0 


0 


0 


0 


00 


00 


00 


46 


7 


0000000 


00004004 


OOOOOOOOO 


0000000077 


0 


0 


0 


0 


0 


00 


00 


00 


47 


8 


0000000 


00008008 


OOOOOOOOO 


OOOOOOOOEE 


0 


0 


0 


0 


0 


00 


00 


00 


48 


9 


0000000 


00010011 


OOOOOOOOO 


OOOOOOOIDD 


0 


0 


0 


0 


0 


00 


00 


00 


49 


10 


0000000 


00020022 


OOOOOOOOO 


00000003BB 


0 


0 


0 


0 


0 


00 


00 


00 


50 


11 


0000000 


00040044 


OOOOOOOOO 


0000000777 


0 


0 


0 


0 


0 


00 


00 


00 


51 


12 


0000000 


00080088 


OOOOOOOOO 


OOOOOOOEEE 


0 


0 


0 


0 


0 


00 


00 


00 


52 


13 


0000000 


OOlOOllO 


OOOOOOOOO 


OOOOOOIDDD 


0 


0 


0 


0 


0 


00 


00 


00 


53 


14 


0000000 


00200220 


OOOOOOOOO 


0000003BBB 


0 


0 


0 


0 


0 


00 


00 


00 


54 


15 


0000000 


00400440 


OOOOOOOOO 


0000007777 


0 


0 


0 


0 


0 


00 


00 


00 


55 


16 


0000000 


00800880 


OOOOOOOOO 


OOOOOOEEEE 


0 


1 


0 


0 


1 


00 


00 


00 


56 


17 


0000000 


01001100 


OOOOOOOOO 


OOOOOIDDDD 


0 


0 


0 


0 


0 


00 


00 


00 


57 


18 


0000000 


02002200 


OOOOOOOOO 


000003B6BB 


0 


0 


0 


0 


0 


00 


00 


00 


58 


19 


0000000 


04004400 


OOOOOOOOO 


0000077777 


0 


0 


0 


0 


0 


00 


00 


00 


59 


20 


0000000 


08008800 


OOOOOOOOO 


OOOOOEHEEE 


0 


0 


0 


0 


0 


00 


00 


00 


60 


21 


0000000 


10011000 


OOOOOOOOO 


OOOOIODDDD 


0 


0 


0 


0 


0 


00 


00 


00 
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61 


22 


0000000 


20022000 


000000000 


00003BBBBB 


0 


0 


0 


0 


0 


00 


00 


00 


62 


23 


0000000 


40044000 


000000000 


0000777777 


0 


0 


0 


0 


0 


00 


00 


00 


63 


24 


0000000 


00088001 


000000000 


OOOOEEEEEE 


0 


0 


0 


0 


0 


00 


00 


oo 


64 


2 S 


0000000 


00110003 


000000000 


OOOIDDDDDD 


0 


0 


0 


0 


0 


00 


00 


00 


65 


26 


0000000 


00220006 


000000000 


0003BBBBBB 


0 


0 


0 


0 


0 


00 


00 


00 


66 


2 7 


0000000 


004400 OC 


000000000 


0007777777 


0 


0 


0 


0 


0 


00 


00 


00 


67 


2 6 


n A n n A n A 


008800 18 


0 00000000 


OOOEEBEBEE 


0 


1 


0 


0 


I 


00 


00 


00 


68 


2 9 


0000000 


0 1 10003 I 


0 00000000 


0 01 DDDDDDC 


0 


0 


0 


0 


0 


00 


00 


00 






/\f\f\f\f\f\f\ 

uuuuuuu 


A1 ^AAACI 


0 00000000 


003B&BBBB8 


0 


0 


0 


0 


0 


00 


00 


00 






rt n rt rt n A n 

uuuuuuu 


nA A n AA /^A 

U44UuUC4 


000000000 


00777 77770 


0 


0 


0 


0 


0 


00 


00 


00 






n n n n n A A 
UUUUUUU 


088001 8 B 


0 00000000 


OOEEEEEEEO 


0 


1 


0 


1 


0 


01 


00 


00 


72 


3 3 


UUuUUOO 


1 lAAA^ i 1 


0 oooooooo 


OlDDDDDDCl 


0 


0 


0 


1 


0 


00 


01 


00 


73 


3 4 


0000000 


22000622 


000000000 


03BBBBBB83 


0 


0 


0 


1 


1 


11 


00 


01 


74 


3 5 


A A A A A A A 


44000C44 


000000000 


07777 77707 


0 


0 


0 


0 


1 


10 


11 


00 


75 


3 6 


0000000 


08001888 


000000000 


OEEEEEEEOE 


0 


0 


0 


1 


1 


01 


10 


11 


76 


3 7 


0000000 


10003111 


0 00000000 


1 DDDDDDC ID 


0 


0 


0 


1 


0 


01 


01 


10 




3 8 


0000000 


200062 22 


0 00000000 


3BBBBBB83B 


0 


0 


0 


1 


0 


11 


01 


01 


78 


3 9 


0000000 


4000C444 


000000000 


7777777077 


0 


0 


0 


0 


1 


01 


XI 


01 


7 9 


4 0 


0000000 


000188 88 


0 00000000 


6EEEEEE0EF 


0 


0 


0 


1 


0 


10 


01 


11 


80 


4 1 


A A A A A A A 

OUOOOOO 


000311 10 


000000000 


5DDDD0C1DE 


0 


0 


0 


1 


1 


00 


10 


01 


8 1 


4 2 


0000000 


0006222 0 


0 00000000 


3BBBBB83BC 


0 


0 


0 


I 


1 


01 


00 


10 


82 


4 3 


0000000 


000C4440 


000000000 


7777770779 


0 


0 


0 


0 


1 


01 


01 


00 


S3 


4 4 


0000000 


001888 80 


000000000 


6EEEEE0BF2 


0 


0 


0 


1 


0 


11 


01 


01 


84 


4 5 


0000000 


00311100 


000000000 


5DDDDC1DE5 


0 


0 


0 


1 


0 


10 


11 


01 


85 


46 


0000000 


00622200 


000000000 


3BBBB83BCB 


0 


0 


0 


1 


1 


01 


10 


11 


86 


4 7 


0000000 


OOC44400 


000000000 


7777707797 


0 


1 


0 


0 


0 


01 


01 


10 


87 


4 6 


0000000 


018888 01 


000000000 


6EESE0EF2F 


0 


1 


0 


1 


1 


11 


01 


01 


88 


4 9 


0000000 


03111003 


000000000 


5DDDC1DE5E 


0 


0 


0 


1 


0 


10 


11 


01 


89 


5 0 


0000000 


06222006 


000000000 


3BBB836CBC 


0 


0 


0 


I 


1 


01 


10 


11 


90 


5 1 


0000000 


OC44400C 


000000000 


7777077979 


0 


0 


0 


0 


1 


00 


01 


10 






Ann A n A A 
UUu U u ou 


1 SbSoOlB 


000000000 


6EEE0EF2 F2 


0 


1 


0 


1 


0 


10 


00 


01 


92 


5 3 


A A A A A A A 


3111003 0 


0 oooooooo 


5DDC1DE5E5 


0 


0 


0 


1 


1 


11 


10 


00 


93 


5 4 


A A A A A A A 

uoooooo 


6222 00 60 


0 oooooooo 


3BB83BC6CB 


0 


0 


0 


1 


0 


00 


11 


10 






UU UUU u u 


A A A A nn f^'^ 
4444UUL1 


A AAAAAAAA 

UUUUUUUOO 


HTHm *?fl^A^ 

7 7 7 077 9797 


0 


0 


0 


0 


0 


10 


00 


11 






uuuuu u u 


nOQQAI oi 

UoooUIoJ 


000000000 


6EE0EF2F2F 


0 


1 


0 


1 


0 


00 


10 


00 






nnnnnnn 
UUUUUUU 


1 1 lAAin^ 
1 1 1 U U J U7 


000000000 


50C1DE5E5F 


0 


0 


0 


1 


1 


01 


00 


10 


97 


5 8 


nnnnnnn 


o 1 "5 n nc nv 
az\} Uo U is 


nnnnnnnnn 
UUOOOOOOO 




0 


0 


0 


1 


0 


00 


01 


00 


98 


5 9 


nn n n n n n 
uuuuuuu 


A A An np 1 r* 
4 4 4 U UL iU 


nnnnnnAAA 

u oooooooo 


7707797972 


0 


0 


0 


0 


0 


11 


00 


01 


99 




nnnnnnn 


U SB 0 LB J o 


AAAAAAAAA 

0 OOOODUOO 


aEQEr 2 FZFC 


0 


1 


0 


0 


0 


01 


11 


00 


100 


6 1 


AA n A A A A 

uuuuuuu 


XIUUJU / u 


A AAAAAAAA 

UUUUUUUUU 


bCl[J£5c5ro 


0 


0 


0 


0 


1 


1 1 


01 


11 


101 




nn nnnnn 
UU uuuuu 


^ *i AAfAVA 

£ i UUdU J£U 


000000000 


383BCBCBF0 


0 


0 


0 


0 


1 


01 


11 


01 






nnnnnnn 
UUUUUUU 


4400C1CO 


000000000 


70779797EO 


0 


0 


0 


0 


1 


11 


01 


11 






nnnnnnn 
UUUUUUU 


AQA1 tt^<tA 

OBO ISJ SO 


0 00000000 


60EF2F2FC1 


0 


0 


0 


I 


0 


10 


11 


01 


104 


6 5 


nnnnnnn 

UUUUUUU 


1 AA^niAl 

100 307 0 1 


AAAAAAAAA 

0 DUOUOUOO 


4 1DE5E5F82 


0 


0 


0 


1 


1 


01 


10 


11 






nn n A A A A 
UUUDuOO 


^AA£ AOA^ 

20O6DE02 


0 00000000 


03BCBCBP04 


0 


0 


0 


1 


0 


01 


01 


10 




6 7 


A A A A A A A 

OUOOOuO 


400C1COS 


000000000 


0779797E09 


0 


0 


0 


0 


1 


10 


01 


01 






A A A A A A A 

UUUUUUU 


00 1 8380A 


000000000 


0EF2F2FC12 


0 


0 


0 


1 


1 


00 


10 


01 






nn AA A A A 

UUUUUUU 


AA^A^Al C 

00 J 070 15 


000000000 


1DE5E5F825 


0 


0 


0 


1 


1 


01 


00 


10 


109 


70 


0000000 


0060E02A 


000000000 


3BC6CBF04B 


0 


0 


0 


1 


0 


00 


01 


00 


110 


71 


0000000 


O0C1C055 


000000000 


779797E097 


0 


I 


0 


1 


0 


10 


00 


01 


111 


72 


0000000 


O183B0AA 


000000000 


6F2F2FC12F 


0 


1 


0 


0 


1 


11 


10 


00 


112 


73 


0000000 


030701S4 


000000000 


5E5E5F925E 


0 


0 


0 


0 


1 


11 


11 


10 


113 


74 


0000000 


060E02A8 


000000000 


3CBCBF04BC 


0 


0 


0 


1 


0 


11 


11 


11 


114 


75 


0000000 


0C1C0550 


000000000 


79797E0979 


0 


0 


0 


0 


1 


00 


11 


11 


lis 


76 


0000000 


18380AA0 


000000000 


72F2FC12F2 


0 


0 


0 


1 


1 


10 


00 


11 


116 


77 


0000000 


30701541 


000000000 


65E5FB25E5 


0 


0 


0 


1 


1 


11 


10 


00 


117 


78 


0000000 


60H02A82 


000000000 


4BCBF04BCB 


0 


1 


0 


1 


1 


00 


11 


10 
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118 


79 


0000000 


41C05505 


000000000 


1797E09796 


0 


1 


0 


1 


0 


11 


00 


11 


119 


BO 


0000000 


O380AA0A 


000000000 


2F2FC12F2C 


0 


1 


0 


0 


0 


01 


11 


00 


120 


81 


0000000 


07015415 


000000000 


5E5F825E59 


0 


0 


0 


0 


1 


11 


01 


11 


121 


82 


0000000 


OE02A82A 


000000000 


3CBF04BCB2 


0 


0 


0 


1 


0 


10 


11 


01 


122 


83 


0000000 


1C055054 


000000000 


797E097964 


0 


0 


0 


0 


0 


01 


10 


11 


123 


84 


0000000 


3 80AA0A8 


000000000 


72FC12F2C9 


0 


0 


0 


1 


0 


01 


01 


10 


124 


85 


0000000 


70154151 


000000000 


65F825E593 


0 


0 


0 


1 


0 


11 


01 


01 


125 


86 


0000000 


602A82A3 


000000000 


4BF04BCB26 


0 


0 


0 


1 


0 


10 


11 


01 


126 


87 


0000000 


40550546 


000000000 


17E097964C 


0 


0 


0 


1 


1 


01 


10 


11 


127 


88 


0000000 


00AA0A8D 


000000000 


2FC12F2C99 


0 


1 


0 


1 


1 


01 


01 


10 


126 


89 


0000000 


0154151A 


000000000 


5F825E5932 


0 


0 


0 


1 


0 


11 


01 


01 


129 


90 


0000000 


02Aa2A34 


000000000 


3F04BCB264 


0 


1 


0 


0 


0 


10 


11 


01 


130 


91 


0000000 


05505468 


000000000 


7E097964C9 


0 


0 


0 


0 


0 


01 


10 


11 


131 


92 


0000000 


0AA0A8D0 


000000000 


7C12F2C992 


0 


1 


0 


0 


0 


01 


01 


10 


132 


93 


0000000 


154151A1 


000000000 


7825E59324 


0 


0 


0 


0 


1 


10 


01 


01 


133 


94 


0000000 


2A82A342 


000000000 


704BCB2648 


0 


1 


0 


0 


1 


00 


10 


01 


134 


95 


0000000 


55054684 


0000 00000 


6097964C91 


0 


0 


0 


1 


1 


01 


00 


10 


135 


96 


0000000 


2A0A8D09 


000000000 


412F2C9923 


0 


0 


0 


0 


1 


01 


01 


00 


136 


97 


0000000 


54151A12 


000000000 


02SE593246 


0 


0 


0 


0 


1 


10 


01 


01 


137 


99 


0000000 


282A3424 


000000000 


04BCB264aD 


0 


0 


0 


1 


1 


00 


10 


01 


138 


99 


0000000 


50546848 


000000000 


097964C91A 


0 


0 


0 


0 


0 


01 


00 


10 


139 


100 


0000000 


20A8D090 


000000000 


12F2C99235 


0 


1 


0 


1 


1 


00 


01 


00 


140 


101 


0000000 


4151A120 


000000000 


25E593246A 


0 


0 


0 


1 


1 


11 


00 


01 


141 


102 


0000000 


02A34240 


000000000 


4BCB2648D5 


0 


1 


0 


1 


1 


01 


11 


00 


142 


103 


0000000 


05468481 


000000000 


17964C91AB 


0 


0 


0 


1 


0 


10 


01 


11 


143 


104 


0000000 


0A8D0903 


000000000 


2F2C992357 


0 


1 


0 


0 


1 


00 


10 


01 


144 


105 


0000000 


151A1206 


000000000 


5E593246AE 


0 


0 


0 


0 


0 


01 


00 


10 


145 


106 


0000000 


2A34240C 


000000000 


3CB2648D5C 


0 


0 


0 


1 


0 


00 


01 


00 


146 


107 


0000000 


54694818 


000000000 


7964C91AB8 


0 


0 


0 


0 


0 


11 


00 


01 


147 


108 


0000000 


28D09030 


000000000 


72C9923571 


0 


1 


0 


1 


1 


01 


11 


00 


148 


109 


0000000 


51A12060 


000000000 


6593246AE2 


0 


1 


0 


1 


1 


10 


01 


11 


149 


110 


0000000 


234240CO 


000000000 


4B2648D5C5 


0 


0 


0 


0 


0 


00 


10 


01 


150 


111 


0000000 


46848180 


000000000 


164C91ABBA 


0 


1 


0 


0 


1 


01 


00 


10 


151 


112 


0000000 


0D090301 


000000000 


2C99235714 


0 


0 


0 


1 


0 


00 


01 


00 


152 


113 


0000000 


1A120602 


000000000 


593246AE2B 


0 


0 


0 


0 


0 


11 


00 


01 


153 


114 


0000000 


34240C04 


000000000 


32648D5C51 


0 


0 


0 


0 


1 


10 


11 


00 


154 


115 


0000000 


684S1809 


000000000 


64C91AfiaA2 


0 


0 


0 


1 


1 


01 


10 


11 


155 


116 


0000000 


50903012 


000000000 


4992357144 


0 


1 


0 


1 


1 


01 


01 


10 


156 


117 


0000000 


21206024 


000000000 


13246AE288 


0 


0 


0 


0 


1 


10 


01 


01 


157 


118 


0000000 


4240C048 


000000000 


2648D5CS11 


0 


0 


0 


0 


0 


00 


10 


01 


158 


119 


0000000 


04818090 


000000000 


4C91AB8A2 3 


0 


1 


0 


1 


0 


00 


00 


10 


159 


120 


0000000 


09030120 


000000000 


1923571446 


0 


0 


0 


0 


0 


00 


00 


00 


160 


12 1 


0000000 


12060240 


000000000 


3246AE288D 


0 


0 


0 


0 


0 


00 


00 


00 


161 


122 


0000000 


240C0480 


000000000 


648D5C511B 


0 


0 


0 


1 


1 


00 


00 


00 


162 


123 


0000000 


48180900 


000000000 


491AB8A237 


0 


0 


0 


0 


0 


00 


00 


00 


163 


124 


0000000 


10301200 


000000000 


123571446F 


0 


0 


0 


0 


0 


00 


00 


00 


164 


125 


000 oooo 


20602400 


000000000 


24eAE288DF 


0 


0 


0 


0 


0 


00 


00 


00 


165 


12 6 


0000000 


40C04800 


000000000 


48D5C511BE 


0 


1 


0 


1 


0 


01 


00 


00 


166 


127 


0000000 


01809001 


000000000 


11AB8A23 7D 


0 


1 


0 


1 


1 


00 


01 


00 


167 


128 


0000000 


03012002 


000000000 


23571446FA 


0 


0 


0 


0 


0 


11 


00 


01 


168 


129 


0000000 


06024004 


000000000 


46AE288DF5 


0 


0 


0 


1 


.0 


01 


11 


00 


169 


130 


0000000 


0C048008 


000000000 


0D5C511BEA 


0 


0 


0 


0 


1 


11 


01 


11 


170 


131 


0000000 


18090011 


000000000 


1AB8A237D5 


0 


0 


0 


1 


0 


10 


11 


01 


171 


132 


0000000 


30120022 


000000000 


3571446FAA 


0 


0 


0 


0 


0 


01 


10 


n 


172 


133 


ooooooo 


60240044 


000000000 


6AE288DF55 


0 


0 


0 


1 


0 


01 


01 


10 


173 


134 


0000000 


40480089 


000000000 


S5CS11BEAA 


0 


0 


0 


1 


0 


11 


01 


01 


174 


135 


ooooooo 


00900113 


000000000 


2B8A237D54 


0 


1 


0 


1 


1 


10 


11 


01 
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175 


136 


0000000 


01200227 


000000000 


57144 6FAA8 


0 


0 


0 


0 


0 


01 


10 


11 


176 


137 


0000000 


0240044E 


000000000 


2E288DF550 


0 


0 


0 


0 


I 


00 


01 


10 


177 


138 


0000000 


04a0089C 


000000000 


5C511BEAA0 


0 


1 


0 


0 


I 


11 


00 


01 


178 


139 


0000000 


09001138 


000000000 


38A23 7D540 


0 


0 


0 


I 


0 


01 


11 


00 


179 


140 


0000000 


12002270 


000000000 


71446FAAei 


0 


0 


0 


0 


1 


11 


01 


11 


180 


141 


0000000 


240044E0 


000000000 


6288DF5503 


0 


0 


0 


1 


0 


10 


11 


01 


181 


142 


0000000 


480089CO 


000000000 


4S11BEAA06 


0 


0 


0 


0 


0 


01 


10 


11 


182 


143 


0000000 


10011381 


000000000 


0A237D540D 


0 


0 


0 


0 


1 


00 


01 


10 


183 


144 


0000000 


20022702 


ooooooooo 


1446FAA81A 


0 


0 


0 


0 


0 


11 


00 


01 


184 


145 


0000000 


40044B04 


000000000 


288DF55035 


0 


0 


0 


1 


0 


01 


11 


00 


185 


146 


0000000 


00089C08 


ooooooooo 


511BEAA06A 


0 


0 


0 


0 


I 


11 


01 


11 


186 


147 


0000000 


00113810 


ooooooooo 


2237D540D5 


0 


0 


0 


0 


I 


01 


11 


01 


187 


148 


0000000 


00227021 


ooooooooo 


446FAA81AA 


0 


0 


0 


0 


1 


11 


01 


11 


188 


149 


0000000 


0044E042 


ooooooooo 


08DF550355 


0 


0 


0 


1 


0 


10 


11 


01 


189 


150 


0000000 


0089C085 


ooooooooo 


11BEAA06AA 


0 


1 


0 


1 


0 


10 


10 


11 


190 


151 


0000000 


0113810A 


ooooooooo 


237D540DS4 


0 


0 


0 


0 


0 


10 


10 


10 


191 


152 


0000000 


02270215 


ooooooooo 


4 6FAA81AA9 


0 


0 


0 


1 


1 


10 


10 


10 


192 


X53 


0000000 


044E04 2A 


ooooooooo 


0DF55O3553 


0 


0 


0 


1 


1 


10 


10 


10 


193 


154 


0000000 


089C0854 


ooooooooo 


1BEAA06AA7 


0 


1 


0 


1 


0 


01 


10 


10 


194 


155 


0000000 


113810A8 


ooooooooo 


3 7D54 0D54E 


0 


0 


0 


1 


0 


01 


01 


10 


195 


156 


0000000 


22702150 


ooooooooo 


6FAA81AA90 


0 


0 


0 


1 


0 


11 


01 


01 


196 


157 


0000000 


44E042A0 


ooooooooo 


5F5503553A 


0 


1 


0 


0 


0 


10 


11 


01 


197 


158 


0000000 


09C08540 


ooooooooo 


3EAA06AA75 


0 


1 


0 


1 


0 


10 


10 


11 


198 


159 


0000000 


13810A80 


ooooooooo 


7O540O54BA 


0 


1 


0 


0 


1 


10 


10 


10 


199 


160 


0000000 


27021500 


ooooooooo 


7AA81AA9D5 


0 


0 


0 


1 


1 


10 


10 


10 


200 


161 


0000000 


4E042A00 


ooooooooo 


75503553AB 


0 


0 


0 


0 


0 


10 


10 


10 


201 


162 


0000000 


1C085400 


ooooooooo 


6AA06AA756 


0 


0 


0 


1 


1 


10 


10 


10 


202 


163 


0000000 


3810A800 


ooooooooo 


5540O54EAC 


0 


0 


0 


0 


0 


10 


10 


10 


203 


164 


0000000 


70215000 


ooooooooo 


2A8 1AA9D58 


0 


0 


0 


1 


1 


10 


10 


10 


204 


165 


0000000 


6042A001 


ooooooooo 


5503553AB0 


0 


0 


0 


0 


0 


10 


10 


10 


205 


166 


0000000 


408-54002 


ooooooooo 


2A06AA7561 


0 


1 


0 


0 


1 


10 


10 


10 


206 


167 


0000000 


010A8004 


ooooooooo 


540O54EAC3 


0 


0 


0 


0 


0 


10 


10 


10 


207 


168 


0000000 


02150009 


ooooooooo 


281AA9D586 


0 


0 


0 


0 


0 


10 


10 


10 


208 


169 


0000000 


042A0012 


ooooooooo 


503553AB0C 


0 


0 


0 


0 


0 


10 


10 


10 


209 


170 


0000000 


08540024 


ooooooooo 


206AA75618 


0 


0 


0 


0 


0 


10 


10 


10 


210 


171 


0000000 


10A80048 


ooooooooo 


40D54EAC30 


0 


1 


0 


1 


0 


01 


10 


10 


211 


172 


0000000 


21500091 


ooooooooo 


01AA9D5861 


0 


0 


0 


I 


0 


01 


01 


10 


212 


173 


0000000 


42A00122 


ooooooooo 


03553ABOC3 


0 


1 


0 


0 


0 


11 


01 


01 


213 


174 


0000000 


05400244 


ooooooooo 


06AA756186 


0 


0 


0 


I 


0 


10 


11 


01 


214 


175 


0000000 


0A8004a8 


ooooooooo 


0D54EAC30O 


0 


1 


0 


0 


1 


01 


10 


11 


215 


176 


0000000 


15000911 


ooooooooo 


1AA9D5861A 


■ 0 


0 


0 


1 


0 


01 


01 


10 


216 


177 


0000000 


2A001223 


ooooooooo 


3553AB0C35 


0 


0 


0 


0 


1 


10 


01 


01 


217 


178 


0000000 


54002446 


ooooooooo 


6AA75618SA 


0 


0 


0 


1 


1 


00 


10 


01 


218 


179 


0000000 


2600488D 


ooooooooo 


554EAC30D5 


0 


0 


0 


0 


0 


01 


00 


10 


219 


180 


0000000 


5000911B 


ooooooooo 


2A9D5661AA 


0 


0 


0 


1 


0 


00 


01 


00 


220 


181 


0000000 


20012236 


ooooooooo 


553AB0C355 


0 


0 


0 


0 


0 


11 


00 


01 


221 


182 


0000000 


4002446C 


ooooooooo 


2A75ei86AA 


0 


0 


0 


0 


1 


10 


11 


00 


222 


183 


0000000 


00048809 


ooooooooo 


54EAC30DS4 


0 


0 


0 


1 


1 


01 


10 


11 


223 


184 


0000000 


000911B2 


ooooooooo 


29DS861AA8 


0 


0 


0 


1 


0 


01 


01 


10 


224 


185 


0000000 


00122364 


ooooooooo 


53AB0C3S50 


0 


0 


0 


1 


0 


11 


01 


01 


225 


186 


0000000 


002446CB 


ooooooooo 


2756186AAO 


0 


0 


0 


0 


1 


01 


11 


01 


226 


187 


0000000 


00488090 


ooooooooo 


4EAC3 0D540 


0 


0 


0 


1 


0 


10 


01 


11 


227 


168 


0000000 


00911B20 


ooooooooo 


105861AA61 


0 


1 


0 


0 


1 


00 


10 


01 


228 


189 


0000000 


01223640 


ooooooooo 


3AB0C3S502 


0 


0 


0 


1 


1 


01 


00 


10 


229 


190 


0000000 


02446C80 


ooooooooo 


756186AA05 


0 


0 


0 


0 


1 


01 


01 


00 


230 


191 


0000000 


04880901 


ooooooooo 


6AC30D540B 


0 


I 


0 


1 


1 


11 


01 


01 


231 


192 


0000000 


09116203 


ooooooooo 


S5861AA817 


0 


0 


0 


1 


0 


10 


11 


01 
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Bluetooth. 



232 


193 


233 


194 


234 


195 


235 


196 


236 


197 


237 


133 


238 


199 


239 


200 


ZtO] 


= 3D 


Z[l] 


= CI 


Z[2J 


= FO 


Z[3J 


= BB 


Zt4] 


= 58 


Z[5] 


= IE 


Z[6J 


= 42 


Z[71 


= 42 


Z[8] 


= 4B 


Z[9) 


= 8E 


2[10] 


= CI 


Ztll] 


= 2A 


ZE12] 


= 40 


Z[13] 


= 63 


Z[14l 


= 7A 


Z[15] 


= IE 



12236407 

244eceoE 



0000000 
0000000 

ooooooo 

0000000 

ooooooo 22364072 



000000000 
000000000 



488D901C OOOOOaOOO 
111B2039 000000000 



000000000 
ooooooo 446C80E4 OQOOOOOCO 
OOOOOOO 08D901Ce 000000000 
OOOOOOO 11B20391 000000000 



2BOC35502F 
56186AA05F 
2C30D540BF 
5861AA817E 
30C35502FD 
6186AA05FB 
430DS40BF6 
061AA817EC 



01 
00 
11 
10 
01 
01 

11 

10 



10 11 
01 10 

00 01 

11 00 

10 11 

01 10 
01 01 

11 01 



Reload this pattern into the LFSRs 

Hold content of 5!utnmation Combiner regs and calculate new C[t+ll and 2 values 



LFSRl <= 04B583D 
LFSR2 2 08E1EC1 

LFSR3 <= 063C142F0 

LFSR4 <= 0F7A2A42BB 

C[t+1] <= 10 



Generating 12 5 key symbols (encryption/decryption sequence) 



240 


1 


04B5e3D 


208E1EC1 


063C142FO 


0F7A2A42BB 


0 


1 


0 


0 


0 


10 


11 


01 


241 


2 


096B07A 


411C3D82 


0C78285E1 


1EF4548577 


1 


0 


1 


1 


1 


10 


10 


11 


242 


3 


12De0F4 


02337B04 


18F050BC3 


3DE8A90AEF 


0 


0 


1 


1 


0 


01 


10 


10 


243 


4 


05AC1E9 


0470F609 


11E0A1786 


7BD15215DF 


0 


0 


0 


1 


0 


01 


01 


10 


244 


5 


06583D2 


08B1EC13 


03C142F0C 


77A2A42BBF 


1 


1 


0 


1 


0 


00 


01 


01 


245 


6 


16B07A5 


IIC3DB27 


078285E18 


6F4548577B 


0 


1 


0 


0 


1 


11 


00 


01 


246 


7 


0D60F4B 


2387B04F 


0F050BC30 


5B8A90AEFD 


1 


1 


1 


1 


1 


00 


11 


00 


247 


8 


1AC1E97 


470F609B 


1E0A17860 


3D15215DFA 


1 


0 


1 


0 


0 


11 


00 


11 


248 


9 


1583D2E 


0E1EC13D 


1C142FOC0 


7A2A42BBF4 


0 


0 


1 


0 


0 


01 


11 


00 


249 


10 


0B07A5D 


1C3D827B 


18285E181 


74548S77E9 


1 


0 


1 


0 


1 


10 


01 


11 


250 


11 


160F4BB 


387B04F7 


10S0BC302 


68A90AEFD2 


0 


0 


0 


1 


1 


00 


10 


01 


251 


12 


0C1E976 


70Fo09EE 


00A17860S 


515215DFA5 


1 


1 


0 


0 


0 


00 


00 


10 


252 


13 


183D2BD 


61EC13DD 


0142F0C0B 


22A42BBF4B 


1 


1 


0 


•1 


1 


01 


00 


00 


253 


14 


107A5DA 


43D827BA 


0285E1817 


4548577E97 


0 


1 


0 


0 


0 


00 


01 


00 


254 


15 


O0F4BB4 


07B04F74 


050BC302F 


0A90AEFD2B 


0 


1 


0 


1 


0 


10 


00 


01 


255 


16 


01E9769 


0F609EE8 


0A178605E 


15215DFA5C 


0 


0 


1 


0 


1 


11 


10 


00 


256 


17 


03D2EO3 


1EC13DD0 


142F0C0BD 


2A42BBF4B9 


0 


1 


0 


0 


0 


00 


11 


10 


257 


18 


07A5DA7 


3D827BA0 


085E1817B 


548577E972 


0 


1 


1 


1 


1 


11 


00 


11 
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Bluetooth. 



258 


19 


0F4BB4F 


7B04F740 


10BC302F6 


290AEFD2E5 


1 


0 


0 


0 


0 


01 


11 


00 


259 


20 


IE9769F 


7609EE80 


0178605ED 


5215DFA5CA 


1 


0 


0 


0 


0 


10 


01 


11 


260 


21 


1D2ED3F 


6C13DD01 


02F0C0BDA 


242BBF4B94 


1 


0 


0 


0 


1 


00 


10 


01 


261 


22 


IA5DA7E 


5827BA03 


0SE1817B4 


46577E9729 


1 


0 


0 


0 


I 


01 


00 


10 


262 


23 


14BB4FC 


304F7407 


OBC302F69 


10AEFD2E53 


0 


0 


1 


I 


1 


00 


01 


00 


263 


24 


09769F9 


eO9EE80B 


178605ED2 


215DFA5CA7 


1 


1 


0 


0 


0 


10 


00 


01 


264 


25 


12ED3F2 


413DD01C 


0F0C0BDA4 


42BBF4B94F 


0 


0 


1 


1 


0 


00 


10 


00 


265 


26 


05DA7E5 


027BA038 


1E1817B49 


0577E9729F 


0 


0 


1 


0 


1 


01 


00 


10 


266 


27 


0BB4FCA 


04F74071 


1C302F693 


0AEFD2E53F 


1 


1 


1 


1 


1 


11 


01 


00 


267 


28 


1769F95 


09EE80E3 


18605ED27 


15DFA5CA7F 


0 


1 


1 


1 


0 


11 


11 


01 


268 


29 


0ED3F2B 


13DD01C6 


10C0BDA4F 


26BF4B94FE 


1 


1 


0 


1 


0 


10 


11 


11 


269 


30 


1DA7E56 


2 7BA03 8D 


01817B49F 


577E9729FD 


1 


1 


0 


0 


0 


10 


10 


11 


270 


31 


1B4FCAD 


4F74071B 


0302F693E 


2EFD2E53FB 


1 


0 


0 


1 


0 


01 


10 


' 10 


271 


32 


169F95B 


1EE80E37 


0605ED27D 


5DFA5CA7F7 


0 


1 


0 


1 


1 


01 


01 


10 


272 


33 


0D3F2B7 


3DD01C6E 


0C0BDA4FB 


3BF4B94FEF 


1 


1 


1 


1 


1 


00 


01 


01 


273 


34 


1A7ES6F 


7BA038DC 


I817B49F6 


77E9729FDE 


1 


1 


1 


1 


0 


01 


00 


01 


274 


35 


14FCADF 


774071B9 


102F693ED 


6FD2E53FBD 


0 


0 


0 


1 


0 


00 


01 


,00 


275 


36 


09F9SBB 


6E80E3 73 


005ED27DB 


5FA5CA7F7B 


1 


1 


0 


1 


I 


10 


00 


01 


276 


37 


13F2B7C 


5D01C6E7 


0 0BDA4FB6 


3F4B94FEF7 


0 


0 


0 


0 


0 


11 


10 


00 


277 


38 


07E56F9 


3A03eDCE 


017B49F6C 


7E9729FDEE 


0 


0 


0 


1 


0 


00 


11 


10 


278 


39 


0FCADF2 


74071B9C 


02F693ED8 


7D2E5 3FBDD 


1 


0 


0 


0 


1 


10 


00 


11 


279 


40 


1F95BE5 


680E3738 


0 5ED27DB0 


7A5CA7F7BA 


1 


0 


0 


0 


1 


11 


10 


00 


280 


41 


1F2B7CA 


501C6B71 


0BDA4FB60 


74B94FBF74 


1 


0 


1 


1 


0 


01 


11 


10 


281 


42 


1E56F94 


2038DCE2 


17B49F6C0 


69729FDEE8 


1 


0 


0 


0 


0 


10 


01 


11 


282 


43 


1CADF29 


4071B9C4 


0F693ED80 


52E53FBDDI 


1 


0 


1 


1 


1 


11 


10 


01 


283 


44 


195BES3 


0OE37389 


1ED27DB01 


2 5CA7F7BA3 


1 


1 


1 


1 


1 


01 


11 


10 


284 


45 


12B7CA6 


01C6E713 


1DA4FB602 


4B94FEF747 


0 


1 


1 


1 


0 


01 


01 


11 


285 


46 


056F94C 


038DCE26 


1B49F6C04 


■1729FDEE8E 


0 


1 


1 


0 


1 


11 


01 


01 


286 


47 


0ADF2 99 


071B9C4D 


1693ED808 


2E53FBDD1C 


1 


0 


0 


0 


0 


10 


11 


01 


287 


48 


15BE532 


0E37389A 


0D27DB011 


5CA7F7BA3 8 


0 


0 


1 


1 


0 


10 


10 


11 


288 


49 


0B7CA64 


1C6E7135 


1A4F66022 


394FEF7471 


1 


0 


1 


0 


0 


01 


10 


10 


289 


50 


16F94C9 


3 8DCE2 6 A 


149F6C044 


72 9FDEE8E2 


0 


1 


0 


1 


1 


01 


01 


10 


290 


51 


0DF2993 


71B9C4D4 


093BD8089 


653FBDD1C4 


1 


1 


1 


0 


0 


00 


01 


01 


291 


52 


1BE5327 


637389A9 


127DB0112 


4A7F7BA3 88 


1 


0 


0 


0 


1 


11 


00 


01 


292 


53 


17CA64B 


46E71353 


04FB60224 


14FEF74710 


0 


1 


0 


1 


1 


01 


11 


00 


293 


54 


0F94C9C 


0DCE26A6 


09F6C0448 


29FDEE8E21 


1 


1 


I 


1 


1 


01 


01 


11 


294 


55 


1F29939 


1B9C4D4D . 


I3ED80B90 


53FBDD1C42 


1 


1 


0 


1 


0 


00 


01 


01 


295 


56 


1E53272 


373a9A9A 


07DB01121 


27F7BA3884 


1 


0 


0 


1 


0 


10 


00 


01 


296 


57 


ICA64E5 


6E713S34 


0FB602242 


4FBF747108 


I 


0 


1 


1 


1 


00 


10 


00 


297 


58 


194C9CB 


5CE26A69 


IF6C0448S 


1FDEE8E210 


1 


1 


1 


I 


0 


11 


00 


10 


298 


59 


1299397 


39C4D4D3 


1ED80890A 


3FBDD1C420 


0 


1 


1 


1 


0 


00 


11 


00 


299 


60 


053272P 


7389A9A6 


1DB011214 


7F7BA38840 


0 


I 


1 


0 


0 


11 


00 


11 


300 


61 


0A64E5E 


6713534C 


lB602242e 


7EF7471081 


1 


0 


1 


1 


0 


00 


11 


00 


301 


62 


14C9CBD 


4E26A699 


16C044850 


7DEBBE2102 


0 


0 


0 


1 


1 


10 


00 


11 


302 


63 


099397A 


1C4D4D32 


0D80890AO 


7BDD1C4205 


1 


0 


1 


1 


1 


00 


10 


00 


303 


64 


13272F4 


389A9A65 


1B0112I41 


77BA38840B 


0 


1 


1 


1 


1 


00 


00 


10 


304 


65 


064E5E8 


713534CB 


160224283 


6F74710817 


0 


0 


0 


0 


0 


00 


00 


00 


305 


66 


0C9CBD1 


626A6997 


0C0448507 


5EE8E2102E 


1 


0 


1 


1 


1 


01 


00 


00 


306 


67 


19397A3 


44D4D32E 


180890AOE 


3OD1C4205C 


1 


1 


1 


1 


1 


11 


01 


00 


307 


68 


1272F46 


09A9A6 5D 


10112141D 


7BA38840B8 


0 


I 


0 


1 


1 


10 


11 


01 


308 


69 


04B5E8C 


13534CBA 


00224283A 


7747108171 


0 


0 


0 


0 


0 


01 


10 


11 


309 


70 


09CBD19 


26A69975 


00448507S 


6E8B2102E3 


1 


1 


0 


1 


0 


10 


01 


10 


310 


71 


1397A32 . 


4D4D32EB 


0 0890AOBA 


5D1C4 2 05C7 


0 


0 


0 


0 


0 


00 


10 


01 


311 


72 


072F465 


1A9A65D7 


0112141D5 


3A3e840B8F 


0 


1 


0 


0 


1 


01 


00 


10 


312 


73 


0E5BBCA 


3534CBAF 


022428'3AA 


74710B171F 


1 


0 


0 


0 


0 


00 


01 


00 


313 


74 


1CBD194 


6A69975B 


0448S07SS 


68E2102E3E 


1 


0 


0 


1 


0 


10 


00 


01 


314 


75 


197A329 


54D32EBC 


0890A0EAB 


51C42 0SC7D 


1 


1 


1 


1 


0 


01 


10 


00 
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315 


76 


12F4653 


29A65D79 


112141D56 


238840B8FA 


0 


1 


0 


1 


1 


01 


01 


10 


316 


77 


05E8CAe 


534CBAF2 


024283AAD 


47108171F4 


0 


0 


0 


0 


1 


10 


01 


01 


317 


78 


0BD194D 


269975E5 


048507.55B 


0E2102E3E9 


1 


1 


0 


0 


0 


11 


10 


01 


318 


79 


17A329A 


4D32EBCB 


090A0EABe 


1C4205C7D2 


0 


0 


1 


0 


0 


00 


11 


10 


319 


80 


0F46535 


1A65D797 


12141D56D 


38840B8FA5 


1 


0 


0 


1 


0 


11 


00 


11 


320 


81 


1E8CA6A 


34CBAF2F 


04283AADA 


7108171F4B 


1 


I 


0 


0 


1 


01 


11 


00 


321 


82 


1D194D5 


6997SE5F 


0850755B4 


62102E3E97 


1 


1 


1 


0 


0 


01 


01 


11 


322 


83 


1A3 29AA 


532EBCBF 


10A0EAB68 


44205C7D2F 


1 


0 


0 


0 


0 


11 


01 


01 


323 


84 


1465355 


265D797F 


0141D56D1 


0840B8FA5E 


0 


0 


0 


0 


1 


01 


11 


01 


324 


85 


OSCAeAB 


4CBAF2FF 


0283AADA2 


108171F4BC 


I 


1 


0 


1 


0 


01 


01 


11 


325 


86 


1194D56 


1975E5FF 


050755B45 


2102E3E979 


0 


0 


0 


0 


1 


10 


01 


01 


326 


87 


0329AAD 


32EBCBFF 


0A0EAB68A 


4205C7D2F3 


0 


1 


I 


0 


0 


11 


10 


01 


327 


88 


065355A 


65D797FF 


141D56D14 


040B8FA5E7 


0 


1 


0 


0 


0 


00 


11 


10 


328 


89 


0CA6AB4 


4BAF2FFF 


0 83AADA2 8 


06171F4BCF 


1 


1 


1 


0 


1 


11 


00 


11 


329 


90 


194D569 


175E5FFF 


10755B450 


102E3E979E 


1 


0 


0 


0 


0 


01 


11 


00 


330 


91 


129AAD3 


2EBCBFFF 


00EAB68A1 


205C7D2F3C 


0 


1 


0 


0 


0 


10 


01 


11 


331 


92 


053 55A6 


5D797FFF 


01D56D142 


40B8FA5B78 


0 


0 


0 


1 


1 


00 


10 


01 


332 


93 


0A6AB4D 


3AF2FFFE 


03AADA285 


0171F4BCF1 


1 


1 


0 


0 


0 


00 


00 


10 


333 


94 


14D569B 


75E5FFFD 


075SB450A 


02E3E979E2 


0 


1 


0 


1 


0 


01 


00 


00 


334 


95 


09AAD37 


6BCBFFFA 


0EAB68A15 


05C7D2F3C4 


1 


1 


1 


1 


1 


11 


01 


00 


335 


96 


135SA6E 


5797FFF4 


1D56D142A 


0B8FA5E788 


0 


1 


1 


1 


0 


11 


11 


01 


336 


97 


0eAB4DC 


2F2FFFE8 


1AADA2854 


171F4BCFH 


0 


0 


1 


0 


0 


11 


11 


11 


337 


98 


0D5 69B8 


5E5FFFD0 


15SB450A9 


2E3E979S23 


1 


0 


0 


0 


0 


11 


11 


11 


338 


99 


1AAD3 70 


3CBFFFAI 


0AB68A153 


5C7D2F3C4$ 


1 


1 


1 


0 


0 . 


10 


11 


11 


339 


100 


155A6E0 


797FFF43 


156D142A7 


38FA5E788D 


0 


0 


0 


1 


1 


01 


10 


11 


340 


101 


0AB4DC0 


72FFFEB7' 


0ADA28S4E 


71F4BCF11B 


1 


1 


1 


1 


1 


10 


01 


10 


341 


102 


1569B81 


65FFFD0E 


15B450A9D 


63E979E236 


0 


1 


0 


1 


0 


11 


10 


01 


342 


103 


0AD3703 


4BFFFA1C 


0B68A153B 


47D2F3C46C 


1 


1 


1 


1 


1 


01 


11 


10 


343 


104 


15A6E07 


17FFF438 


16D142A76 


0FA5E788D8 


0 


1 


0 


1 


1 


10 


01 


11 


344 


105 


0B4DC0F 


2FFFE870 


0DA2 854EC 


1F4BCF11B0 


1 


1 


1 


0 


1 


11 


10 


01 


345 


106 


169B81F 


5FFFD0E1 


1B4S0A9D8 


3E979E2360 


0 


1 


1 


1 


0 


01 


11 


10 


346 


107 


0D3 703F 


3FFFA1C3 


168A153B0 


7D2F3C46C1 


1 


1 


0 


0 


1 


10 


01 


11 


347 


108 


1A6E07E 


7FFF4386 


0D142A761 


7A5E788D83 


1 


1 


1 


0 


1 


11 


10 


01 


348 


109 


14DC0FD 


7FFE870C 


1A2854EC2 


74BCF11B07 


0 


1 


1 


1 


0 


01 


11 


10 


349 


110 


09B81FB 


7FFD0E19 


14S0A9D84 


6979E2360E 


1 


1 


0 


0 


1 


10 


01 


11 


350 


111 


13703F6 


7FFA1C33 


08A153609 


52F3C46C1C 


0 


1 


1 


1 


1 


11 


10 


01 


351 


112 


06E07EC 


7FF43867 


1142A76I2 


25E788D838 


0 


1 


0 


1 


1 


00 


11 


10 


352 


113 


0DC0FD8 


7FE870CF 


02854EC25 


4BCF11B071 


1 


I 


0 


1 


1 


11 


00 


11 


353 


114 


1B81FB1 


7FD0E19E 


050A9D84B 


179B2360E3 


1 


1 


0 


1 


0 


00 


11 


00 


354 


115 


1703F62 


7FA1C33D 


0A153B096 


2F3C46C1C7 


0 


1 


1 


0 


0 


11 


00 


11 


355 


116 


0E0 7EC4 


7F43867B 


142A7612C 


5E788D838E 


1 


0 


0 


0 


0 


01 


11 


00 


356 


117 


1C0FD88 


7E870CF6 


0854EC259 


3CF11B071C 


I 


1 


1 


1 


1 


01 


01 


11 


357 


118 


181FB11 


7D0E19ED 


10A9D84B3 


79E2360B38 


1 


0 


0 


1 


1 


11 


01 


01 


358 


119 


103F622 


7A1C33DA 


0153B0967 


73C46C1C71 


0 


0 


0 


1 


0 


10 


11 


01 


359 


120 


007EC45 


743867B5 


02A7612CE 


6788D838E3 


0 


0 


0 


1 


1 


01 


10 


11 


360 


121 


00FD88B 


6870CF6B 


0S4SC259C 


4F11B071C6 


0 


0 


0 


0 


1 


00 


01 


10 


361 


122 


01FB117 


50E19ED7 


0A9De4B3 8 


1E2360E38C 


0 


1 


1 


0 


0 


10 


00 


01 


362 


123 


03F622F 


21C33DAE 


153B09671 


3C46C1C718 


0 


1 


0 


0 


1 


11 


10 


00 


363 


124 


07EC45F 


43867B5C 


0A7612CE2 


788D838E30 


0 


1 


1 


1 


0 


01 


11 


10 


364 


125 


0FD88BF 


070CF6B9 


14EC259C4 


711B071C61 


1 


0 


0 


0 


0 


10 


01 


11 
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1.3 SECOND SET OF SAMPLE DATA 

Initial values for the key, BD_ADDR and clock 



K'C2 [0] 


. 00 


K'c2 [IJ 


. 00 


K'c2[21 




oo 


K'c2{3l o 


00 


K'C2 [4J 


= 00 


K'c2[5) 


« 00 


K'c2 [61 




00 


K'c2[7] - 


00 


K'c2 [81 


= 00 


K'c2 [9] 


- 00 


K'c2 [10] 




00 


K'c2[lll o 


00 


K'c2 [12J 


= 00 


K'c2 [13] 


« 00 


K'C2 [14] 




00 


K'c2[15] = 


00 


Addr2 [0] 


= 00 


Addr2[ll = 


00 


Addr2[2l = 


00 








Addr2 [3] 


= 00 


Addr2[4} . 


00 


Addr2[5] . 


00 








Clk2 [0] 


= 00 


Clk2[l] » 


00 


Clk2[2l » 


00 




Clk2[3] = 03 





Bluetooth. 



Fill LFSRfi with initial data 



t 


clkt 


LFSRl 


LFSR2 


LFSR3 


LFSR4 


XI 


X2 


X3 


X4 


z 


C[t + ll 


C[tl 


ct 


0 


0 


0000000* 


00000000* 


000000000* 


oooooooooo* 


0 


0 


0 


0 


0 


00 


00 


00 


1 


1 


0000001* 


00000001* 


000000001* 


0000000001* 


0 


0 


0 


0 


0 


00 


00 


00 


2 


2 


0000002* 


00000002* 


000000002* 


0000000003* 


0 


0 


0 


0 


0 


00 


00 


00 


3 


3 


0000004* 


00000004* 


000000004* 


0000000007* 


0 


0 


0 


0 


0 


00 


00 


00 


4 


4 


0000008* 


00000008* 


000000008* 


OOOOOOOOOE* 


0 


0 


0 


0 


0 


00 


00 


00 


5 


5 


0000010* 


00000010* 


000000010* 


OOOOOOOOIC* 


0 


0 


0 


0 


0 


00 


00 


00 


6 


6 


0000020* 


00000020* 


000000020* 


0000000038* 


0 


0 


0 


0 


0 


00 


00 


00 


7 


7 


0000040* 


00000040* 


000000040* 


0000000070* 


0 


0 


0 


0 


0 


00 


00 


00 


8 


8 


0000080* 


ooooooso* 


000000080* 


OOOOOOOOEO* 


0 


0 


0 


0 


0 


00 


00 


00 


9 


9 


0000100* 


00000100* 


000000100* 


OOOOOOOICO* 


0 


0 


0 


0 


0 


00 


00 


00 


10 


10 


0000200* 


00000200* 


000000200* 


0000000380* 


0 


0 


0 


0 


0 


00 


00 


00 


11 


11 


0000400* 


00000400* 


000000400* 


0000000700* 


0 


0 


0 


0 


0 


00 


00 


00 


12 


12 


0000800* 


00000800* 


000000800* 


OOOOOOOEOO* 


0 


0 


0 


0 


0 


00 


00 


00 


13 


13 


0001000* 


00001000* 


000001000* 


OOOOOOICOO* 


0 


0 


0 


0 


0 


00 


00 


00 


14 


14 


0002000* 


00002000* 


000002000* 


0000003600* 


0 


0 


0 


0 


0 


00 


00 


00 


15 


15 


0004000* 


00004000* 


000004000* 


0000007000* 


0 


0 


0 


0 


0 


00 


00 


00 


16 


16 


0008000* 


00008000* 


000008000* 


OOOOOOEOOO* 


0 


0 


0 


0 


0 


00 


00 


00 


17 


17 


0010000* 


00010000*. 


000010000* 


OOOOOICOOO* 


0 


0 


0 


0 


0 


00 


00 


00 


IS 


18 


0020000* 


00020000* 


000020000* 


0000038000* 


0 


0 


0 


0 


0 


00 


00 


00 


19 


19 


0040000* 


00040000* 


000040000* 


0000070000* 


0 


0 


0 


0 


0 


00 


00 


00 


20 


20 


0080000* 


00080000* 


000080000* 


OOOOOEOOOO* 


0 


0 


0 


0 


0 


00 


00 


00 


21 


21 


0100000* 


00100000* 


000100000* 


OOOOICOOOO* 


0 


0 


0 


0 


0 


00 


00 


00 


22 


22 


0200000* 


00200000* 


000200000* 


0000380000* 


0 


0 


0 


0 


0 


00 


00 


00 


23 


23 


0400000* 


00400000* 


000400000* 


0000700000* 


0 


0 


0 


0 


0 


00 


00 


00 


24 


24 


0800000* 


ooeooooo* 


000800000* 


OOOOEOOOOO* 


1 


1 


0 


0 


0 


01 


00 


00 


25 


25 


1000000* 


01000000* 


001000000* 


OOOICOOOOO* 


0 


0 


0 


0 


0 


00 


00 


00 


26 


26 


0000001 


02000000* 


002000000* 


0003800000* 


0 


0 


0 


0 


0 


00 


00 


00 


27 


27 


0000002 


04000000* 


004000000* 


0007000000* 


0 


0 


0 


0 


0 


00 


00 


00 


28 


28 


0000004 


08000000* 


008000000* 


OOOEOOOOOO* 


0 


0 


0 


0 


0 


00 


00 


00 


29 


29 


0000008 


10000000* 


010000000* 


OOlCOOOOOO* 


0 


0 


0 


0 


0 


00 


00 


00 


30 


30 


0000010 


20000000* 


020000000* 


0038000000* 


0 


0 


0 


0 


0 


00 


00 


00 


31 


31 


0000020 


40000000* 


040000000* 


0070000000* 


0 


0 


0 


0 


0 


00 


00 


00 


32 


32 


0000040 


00000001 


080000000* 


OOEOOOOOOO* 


0 


0 


1 


1 


0 


01 


00 


00 


33 


33 


0000080 


00000002 


100000000* 


OICOOOOOOO* 


0 


0 


0 


1 


1 


00 


00 


00 


34 


34 


0000101 


00000004 


000000001 


0380000000* 


0 


0 


0 


1 


1 


00 


00 


00 
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Bluetooth. 



35 


35 


0000202 


00000008 


000000002 


0700000000* 


0 


0 


0 


0 


0 


00 


00 


00 


36 


36 


0000404 


00000010 


000000004 


OEOOOOOOOO* 


0 


0 


0 


0 


0 


00 


00 


00 


37 


37 


0000808 


00000020 


000000008 


ICOOOOOOOO* 


0 


0 


0 


0 


0 


00 


00 


00 


38 


38 


0001011 


00000040 


000000011 


3800000000* 


0 


0 


0 


0 


0 


00 


00 


00 


39 


39 


0002022 


00000080 


000000022 


7000000000* 


0 


0 


0 


0 


0 


00 


00 


00 



Start clocking Summation Combiner 



40 


1 


0004044 


00000100 


000000044 


6000000001 


0 


0 


0 


0 


0 


OQ 


00 


00 


41 


2 


0008088 


00000200 


000000088 


4000000003 


0 


0 


0 


0 


0 


00 


00 


00 


42 


3 


0010111 


00000400 


000000111 


0000000007 


0 


0 


0 


0 


0 


00 


00 


00 


43 


4 


0020222 


00000800 


000000222 


OOOOOOOOOE 


0 


0 


0 


0 


0 


00 


00 


00 


44 


5 


0040444 


00001001 


000000444 


OOOOOOOOID 


0 


0 


0 


0 


0 


00 


00 


00 


45 


6 


0080888 


00002002 


000000868 


000000003B 


0 


0 


0 


0 


0 


00 


00 


00 


46 


7 


0101111 


00004004 


000001111 


0000000077 


0 


0 


0 


0 


0 


00 


00 


00 


47 


8 


0202222 


00008008 


000002222 


OOOOOOOOEH 


0 


0 


0 


0 


0 


00 


00 


00 


48 


9 


0404444 


00010011 


000004444 


OOOOOOOIDD 


0 


0 


0 


0 


0 


00 


00 


00 


49 


10 


0808888 


00020022 


000008888 


00000003BB 


1 


0 


0 


0 


1 


00 


00 


00 


50 


11 


1011110 


00040044 


000011111 


0000000777 


0 


0 


0 


0 


0 


00 


00 


00 


51 


12 


0022221 


00080088 


000022222 


OOOOOOOESE 


0 


0 


0 


0 


0 ' 


00 


00 


00 


52 


13 


0044442 


00100110 


000044444 


OOOOOOIDDD 


0 


0 


0 


0 


0 


00 


00 


00 


53 


14 


0038884 


00200220 


000088888 


0000003BBB 


0 


0 


0 


0 


0 


00 


00 


00 


54 


15 


0111109 


00400440 


000111111 


0000007777 


0 


0 


0 


0 


0 


00 


00 


00 


55 


16 


0222212 


00800880 


000222222 


OOOOOOEEEE 


0 


1 


0 


0 


1 


00 


00 


00 


56 


17 


0444424 


OlOOllOO 


000444444 


OOOOOIDDDD 


0 


0 


0 


0 


0 


00 


' 00 


. 00 


57 


18 


0888848 


02002200 


000888888 


000003BBBB 


1 


0 


0 


0 


1 


00 


00 


00 


58 


19 


1111090 


04004400 


001111110 


0000077777 


0 


0 


0 


0 


0 


00 


00 


00 


59 


20 


0222120 


08008800 


002222220 


OOOOOEEEES 


0 


0 


0 


0 


0 


00 


00 


00 


60 


21 


0444240 


10011000 


004444440 


OOOOIDDDDD 


0 


0 


0 


0 


0 


00 


00 


00 


61 


22 


0888480 


20022000 


008888880 


Q0003BB6BB 


1 


0 


0 


0 


1 


00 


00 


00 


62 


23 


1110900 


40044000 


011111100 


0000777777 


0 


0 


0 


0 


0 


00 


00 


00 


63 


24 


0221200 


00088001 


022222200 


OOOOEEEEEE 


0 


0 


0 


0 


0 


00 


00 


00 


64 


25 


0442400 


00110003 


044444400 


OOOIDDDDDD 


0 


0 


0 


0 


0 


00 


00 


00 


65 


26 


0884800 


00220006 


088888800 


0003BBBBBB 


1 


0 


1 


0 


0 


01 


00 


00 


66 


27 


1109000 


0044QOOC 


111111000 


0007777777 


0 


0 


0 


0 


1 


01 


01 


00 


67 


28 


0212001 


00880018 


022222001 


OOOEEEEEEB 


0 


1 


0 


0 


0 


11 


01 


01 


es 


29 


0424002 


01100031 


044444002 


OOIDDDDDDC 


0 


0 


0 


0 


1 


01 


11 


01 


69 


30 


0848004 


02200062 


088888004 


003BBBBBB8 


1 


0 


1 


0 


1 


10 


01 


11 


70 


31 


1090008 


044000C4 


111110008 


0077777770 


0 


0 


0 


0 


0 


00 


10 


01 


71 


32 


0120010 


08800188 


022220010 


OOEEEEEEEO 


0 


1 


0 




0 


00 


00 


10 


72 


33 


0240020 


11000311 


044440020 


OlDDDDDDCl 


0 


0 


0 




1 


00 


00 


00 


73 


34 


0480040 


22000622 


088880040 


036BEBB&83 


0 


0 


1 




0 


01 


00 


00 


74 


35 


0900081 


44000C44 


111100080 


0777777707 


1 


0 


0 




0 


00 


01 


00 


75 


36 


1200103 


08001888 


022200101 


OEEEEEEEOS 


0 


0 


0 




1 


11 


00 


01 


76 


37 


0400207 


10003111 


044400202 


IDDDDDDCID 


0 


0 


0 




0 


01 


11 


00 


77 


38 


080040E 


20006222 


088800404 


3BBBBBB83B 


1 


0 


1 




0 


01 


01 


11 


78 


39 


100081C 


4000C444 


111000808 


7777777077 


0 


0 


0 




1 


10 


01 


01 


79 


40 


0001038 


00018888 


022001010 


6EEEEEE0EF 


0 


0 


0 




1 


00 


10 


01 


80 


41 


0002070 


00031110 


044002020 


5DDDDDC1DE 


0 


0 


0 




1 


01 


00 


10 


81 


42 


00040EO 


00062220 


0880Q4040 


3BBBBB63BC 


0 


0 


1 




1 


00 


01 


00 


82 


43 


00081C1 


0Q0C4440 


110008081 


7777770779 


0 


0 


0 




0 


11 


00 


01 


83 


44 


0010383 


00188880 


020010103 


6EEEEE0EF2 


0 


0 


0 




0 


01 


11 


00 


84 


45 


0020707 


00311100 


040020206 


5DDDDC1DE5 


0 


0 


0 




0 


10 


01 


11 


85 


46 


0040EOB 


00622200 


08004040C 


3BBBB83BCB 


0 


0 


1 




0 


11 


10 


01 


86 


47 


0081C1D 


00C44400 


100080819 


7777707797 


0 


1 


0 




0 


00 


11 


10 


87 


48 


010383A 


01888801 


000101032 


6EEEE0EF2F 


0 


1 


0 




0 


11 


00 


11 


88 


49 


0207075 


03111003 


000202064 


5DDDC1DE5E 


0 


0 


0 




0 


01 


11 


00 
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Bluetooth. 



89 


50 


040E0EA 


06222006 


0004040C8 


3BBB83BCBC 


0 


0 


0 


1 


0 


10 


01 


11 


90 


51 


081CIO5 


0C44400C 


000808191 


7777077979 


1 


0 


0 


0 


1 


00 


10 


01 


91 


52 


10383AB 


18888018 


001010323 


6EEE0EF2F2 


0 


1 


0 


1 


0 


00 


00 


10 


92 


53 


0070756 


31110030 


002020646 


5DDC1DE5E5 


0 


0 


0 


1 


1 


00 


00 


00 


93 


54 


OOEOEAC 


62220060 


004040C8C 


3BB83BCBCB 


0 


0 


0 


1 


1 


00 


00 


00 


94 


55 


01C1D59 


444400C1 


008081919 


7770779797 


0 


0 


0 


0 


0 


00 


00 


00 


95 


56 


0383AB2 


08880183 


010103232 


6EE0EF2F2F 


0 


I 


0 


1 


0 


01 


00 


00 


96 


57 


0707565 


11100307 


020206464 


5DC1DESE5F 


0 


0 


0 


1 


0 


00 


01 


00 


97 


58 


OEOEACA 


2220060E 


04040CSC8 


3B83BCBCBF 


1 


0 


0 


1 


0 


10 


00 


01 


98 


59 


IC1D594 


44400CIC 


080819191 


770779797E 


1 


0 


1 


0 


0 


00 


10 


00 


99 


60 


183AB28 


08801838 


101032323 


6E0EF2F2FC 


1 


1 


0 


0 


0 


00 


00 


10 


100 


61 


1075650 


11003070 


002064647 


5C1DB5E5FB 


0 


0 


0 


0 


0 


00 


00 


00 


101 


62 


OOEACAl 


220060EO 


0040C8C8E 


383BCBCBFO 


0 


0 


0 


0 


0 


00 


00 


00 


102 


63 


01D5943 


4400C1C0 


00819191D 


70779797E0 


0 


0 


0 


0 


0 


00 


00 


00 


103 


64 


03AB286 


08018380 


01032323A 


60EF2F2FC1 


0 


0 


0 


1 


1 


00 


00 


00 


104 


65 


075650C 


10030701 


020646475 


41DE5E5F82 


0 


0 


0 


1 


1 


00 


00 


00 


105 


66 


0EACA18 


20060E02 


040C8C8EA 


03BCBCBF04 


1 


0 


0 


1 


0 


01 


00 


00 


106 


67 


1D59430 


400C1C05 


0819191D4 


0779797E09 


1 


0 


1 


0 


1 


00 


01 


00 


107 


68 


1AB2861 


0018380A 


1032323A9 


0EF2F2FC12 


1 


0 


0 


1 


0 


10 


00 


01 


108 


69 


15650C3 


00307015 


006464752 


1DE5E5F825 


0 


0 


0 


1 


I 


11 


10 


00 


109 


70 


0ACA186 


0060E02A 


00C8C8EA4 


3BCBCBF04B 


1 


0 


0 


1 


1 


00 


11 


10 


110 


71 


159430C 


O0CICO55 


019191D48 


779797E097 


0 


1 


0 


1 


0 


11 


00 


11 


111 


72 


0B28618 


018380AA 


032323A90 


6F2F2 FC12F 


. 1 


1 


0 


0 


1 


01 


11 


00 


112 


73 


1650C30 


03070154 


064647520 


5ESE5F825E 


0 


0 


0 


0 


1 


11 


01 


11 


113 


74 


0CA1860 


060E02A8 


0C8C8EA4O 


3CBCBF04BC 


1 


0 


1 


1 


0 


11 


11 


01 


114 


75 


19430C0 


0C1C0550 


19191D480 


79797E0979 


1 


0 


1 


0 


1 


11 


11 


11 


115 


76 


1286180 


18380AA0 


12323A900 


72F2FC12F2 


0 


0 


0 


1 


0 


11 


11 


11 


116 


77 


050C301 


30701541 


046475201 


65E5F825E5 


0 


0 


0 


1 


0 


11 


11 


11 


117 


78 


0A18602 


60E02A82 


08C8EA402 


4BCBF04BCB 


1 


1 


I 


1 


1 


10 


11 


11 


118 


79 


1430C04 


41C05505 


1191D4804 


1797E09796 


0 


1 


0 


1 


0 


10 


10 


11 


119 


80 


0861808 


O380AA0A 


0323A9008 


2F2FC12F2C 


1 


1 


0 


0 


0 


01 


10 


10 


120 ' 


81 


10C3011 


07015415 


064752011 


5E5F825E59 


0 


0 


0 


0 


1 


00 


01 


10 


121 


S2 


0186022 


0E02A82A 


0C8EA4022 


3CBF04BC62 


0 


0 


1 


1 


0 


10 


00 


01 


122 


83 


030C045 


1C055054 


191048044 


797E097964 


0 


0 


1 


0 


1 


11 


10 


00 


123 


84 


061808A 


3 80AA0A8 


123A90088 


72FC12F2C9 


0 


0 


0 


1 


0 


00 


11 


10 


124 


85 


0C30115 


70154151 


047520111 


65Fa25E593 


1 


0 


0 


I 


0 


11 


00 


11 


125 


86 


186022A 


602A82A3 


08BA40222 


4BF04BCB26 


1 


0 


1 


1 


0 


00 


11 


00 


126 


87 


10C045S 


40550546 


11D480444 


17E097964C 


0 


0 


0 


1 


1 


10 


00 


11 


127 


88 


01808AA 


00AA0A8D 


03A900a88 


2FC12F2C99 


0 


1 


0 


1 


0 


00 


10 


00 


128 


89 


0301155 


0154151A 


075201111 


5F825E5932 


0 


0 


0 


1 


1 


01 


00 


10 


129 


90 


06022AA 


02A82A34 


0EA402222 


3F04BCB264 


0 


1 


1 


0 


1 


00 


01 


00 


130 


91 


0C04555 


05505468 


1D4804445 


7E097964C9 


1 


0 


1 


0 


0 


10 


00 


01 


131 


92 


1808AAA 


0AA0A8D0 


lA90088aA 


7C12F2C992 


1 


1 


I 


0 


1 


00 


10 


00 


132 


93 


1011555 


154151A1 


152011115 


782SE59324 


0 


0 


0 


0 


0 


01 


00 


10 


133 


94 


0022AAB 


2A62A342 


0A402222B 


704BCB264B 


0 


1 


1 


0 


1 


00 


01 


00 


134 


95 


0045556 


55054684 


148044457 


6097964C91 


0 


0 


0 


1 


1 


11 


00 


01 


135 


96 


008AAAC 


2A0A8D09 


090088aAS 


412F2C9923 


0 


0 


1 


0 


0 


01 


11 


00 


136 


97 


0X15559 


54151A12 


12011115D 


025E593246 


0 


0 


0 


0 


1 


11 


01 


11 


137 


98 


022AAB2 


2e2A3424 


0402222BA 


04BCB2648D 


0 


0 


0 


1 


0 


10 


11 


01 


138 


99 


0455564 


50546848 


080444575 


097964C91A 


0 


0 


1 


0 


1 


01 


10 


11 


139 


100 


OSAAACa 


20A8D090 


100888ASA 


12F2C99235 


I 


1 


0 


I 


0 


10 


01 


10 


140 


101 


1155591 


4151A120 


0011115D5 


25E593246A 


0 


0 


0 


1 


1 


00 


10 


01 


141 


102 


02AAB22 


02AJ4240 


002222BAA 


4BCB2 648D5 


0 


1 


0 


1 


0 


00 


00 


10 


142 


103 


0555644 


05466481 


004445755 


17964C91AB 


0 


0 


0 


1 


1 


00 


00 


00 


143 


104 


0AAAC6 8 


0A6D0903 


00868AEAA 


2F2C992357 


1 


1 


0 


0 


0 


01 


00 


00 


144 


105 


1555911 


151A1206 


011115D55 


5B593246AB 


0 


0 


0 


0 


1 


01 


01 


00 


145 


106 


0AAB222 


2A34240C 


02222BAAA 


3CB2648D5C 


1 


0 


0 


1 


1 


11 


01 . 


01 
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L46 


107 


1556445 


54684818 


044457555 


7964C91AB8 


0 


0 


0 


0 


1 


01 


11 


01 


L47 


108 


0AACS8B 


28D09030 


0 88 8AEAAA 


72C9923571 


1 


1 


1 


1 


1 


01 


01 


11 


143 


109 


1559117 


51A12060 


11115DS55 


6S93246AE2 


0 


1 


0 


1 


1 


11 


01 


01 


149 


110 


0AB222F 


234240C0 


0222BAAAB 


4B2648D5C5 


1 


0 


0 


0 


0 


10 


11 


01 


150 


111 


156445F 


46848180 


044575557 


164C91AB8A 


0 


1 


0 


0 


1 


01 


10 


11 


151 


112 


OACSSBF 


QDQ9Q3Q1 


OSBAEAAAE 


2C99235714 


1 


0 


1 


1 


Q 


10 


01 


IQ 


1S2 


113 


159117F 


1A120602 


1115D555D 


593246AE28 


0 


0 


0 


0 


0 


00 


10 


01 


153 


114 


0B222FE 


34240C04 


022BAAABA 


32648D5C51 


1 


0 


0 


0 


1 


01 


00 


10 


154 


115 


16445FD 


68481809 


045755574 


e4C91AB8A2 


0 


0 


0 


1 


0 


00 


01 


00 


155 


116 


0C8 8BFA 


50903012 


08AEAAAE8 


4992357144 


1 


1 


1 


1 


0 


01 


00 


01 


156 


117 


19117F5 


21206024 


115D555D1 


13246AE288 


I 


0 


0 


0 


0 


00 


01 


00 


157 


118 


12 2 2FEA 


4240C048 


02BAAABA2 


2648D5CS11 


0 


0 


0 


0 


0 


11 


00 


01 


158 


119 


0445FD5 


04818090 


057555744 


4C91AB8A23 


0 


1 


0 


1 


1 


01 


11 


00 


159 


120 


088BFAA 


09030120 


0AEAAAE88 


1923571446 


1 


0 


1 


0 


1 


10 


01 


11 


160 


121 


1117F55 


12060240 


15D555D11 


3246AE288D 


0 


0 


0 


0 


0 


00 


10 


01 


161 


122 


02 2FEAA 


240C0480 


0BAAABA22 


648DSC511B 


0 


0 


1 


1 


0 


00 


00 


10 


162 


123 


045FDS4 


48180900 


175557444 


491AB8A237 


0 


0 


0 


0 


0 


00 


00 


00 


163 


124 


08BFAA9 


10301200 


0EAAAE889 


123571446F 


1 


0 


1 


0 


0 


01 


00 


00 


164 


125 


U7F553 


20602400 


1D555D113 


246AE288DF 


0 


0 


1 


0 


0 


00 


01 


00 


165 


126 


02FEAA7 


40C04800 


1AAABA22 7 


48D5C511BE 


0 


1 


1 


1 


1 


10 


00 


01 


166 


127 


05FD54F 


01809001 


15557444F 


11AB8A237D 


0 


1 


0 


1 


0 


00 


10 


00 


1S7 


128 


0BFAA9F 


03012002 


0AAAE889E 


23571446FA 


1 


0 


1 


0 


0 


00 


00 


10 


168 


129 


17F553F 


06024004 


1555D113D 


46AE288DFS 


0 


0 


0 


1 


1 


00 


00 


00 


169 


130 


0FEAA7E 


0C048008 


0AABA227A 


0D5C511BEA 


1, 


0 


1 


0 


0 


01 


00 


00 


170 


131 


1FD54FC 


18090011 


1557444F5 


1AB8A237DS 


1 


0 


0 


1 


1 


00 


01 


00 


171 


132 


1FAA9F9 


30120022 


0AAE889E6 


3571446FAA 


1 


0 


1 


0 


0 


10 


00 


01 


172 


133 


1F553F2 


60240044 


155DH3D7 


6AE288DF55 


1 


0 


0 


1 


0 


00 


10 


00 


173 


134 


1EAA7E4 


40480089 


0ABA22 7AE 


55C511BEAA 


1 


0 


1 


1 


1 


00 


00 


10 


174 


135 


1D54FC9 


00900113 


157444F5D 


2B8A237D54 


1 


1 


0 


1 


1 


01 


00 


00 


175 


136 


1AA9F93 


01200227 


0AE8 89EBA 


571446FAA8 


1 


0 


1 


0 


1 


00 


01 


00 


176 


137 


1553F26 


0240044E 


15D1'13D75 


2E288DF5S0 


0 


0 


0 


0 


0 


11 


00 


01 


177 


133 


0AA7E4C 


0480089C 


0BA2 27AEA 


5C511BEAA0 


1 


1 


1 


0 


0 


00 


11 


00 


178 


139 


154FC98 


09001138 


17444F504 


3 8A23 7D540 


0 


0 


0 


1 


1 


10 


00 


11 


179 


140 


0A9F931 


12002270 


0E88 9EBA9 


71446FAA81 


1 


0 


1 


0 


0 


00 


10 


00 


180 


141 


153F262 


240044E0 


1D113D753 


6288DF5503 


0 


0 


1 


1 


0 


00 


00 


10 


181 


142 


0A7E4C5 


480089C0 


1A22 7AEA7 


4511BEAA06 


1 


0 


1 


0 


0 


01 


00 


00 


182 


143 


14FC98B 


10011381 


1444F5D4F 


0A23 7D54 0D 


0 


0 


0 


0 


1 


01 


01 


00 


183 


144 


09F9316 


20022702 


0889EBA9E 


1446FAA81A 


1 


0 


1 


0 


1 


11 


01 


01 


184 


145 


13F262D 


40044E04 


1113D753D 


288DF55035 


0 


0 


0 


1 


0 


10 


11 


01 


185 


146 


07E4C5A 


00089C08 


0227AEA7A 


SllBEAAOeA 


0 


0 


0 


0 


0 


01 


10 


11 


186 


147 


0FC98B4 


00113810 


044F5D4F5 


2237D540D5 


1 


0 


0 


0 


0 


01 


01 


10 


187 


148 


1F93169 


00227021 


089BBA9EB 


446FAA81AA 


1 


0 


1 


0 


1 


11 


01 


01 


188 


149 


1F262D2 


0044E042 


113D753D7 


08DF550355 


1 


0 


0 


1 


1 


10 


11 


01 


189 


150 


1E4CSA4 


0089C085 


027AEA7AE 


11BEAA06AA 


1 


1 


0 


1 


1 


10 


10 


11 


190 


151 


1C98B48 


0113810A 


04F5D4F5C 


237D540D54 


1 


0 


0 


0 


1 


10 


10 


10 


191 


152 


1931691 


02270215 


09E6A9EB8 


46FAA8 1AA9 


1 


0 


1 


1 


1 


01 


10 


10 


192 


153 


1262022 


044B042A 


13D753D71 


ODF5503553 


0 


0 


0 


1 


0 


01 


01 


10 


193 


154 


04C5A44 


089C08S4 


07AEA7AE2 


1BHAA06AA7 


0 


1 


0 


1 


1 


11 


01 


01 


194 


155 - 


098B488 


113810A8 


0F5D4F5C4 


37D540D54E 


1 


0 


1 


1 


0 


11 


11 


01 


195 


156 


1316910 


22702150 


1EBA9EB89 


6FAA81AA9D 


0 


0 


1 


1 


1 


11 


11 


11 


196 


157 


062D220 


44E042A0 


1D753D712 


5F5503553A 


0 


1 


1 


0 


1 


11 


11 


11 


197 


158 


0C5A440 


09C08540 


1ABA7AE25 


3BAA06AA75 


1 


1 


1 


1 


1 


10 


11 


11 


198 


159 


18B4880 


13810A80 


15D4F5C4B 


7D540D54EA 


1 


1 


0 


0 


0 


10 


10 


11 


199 


160 


1169100 


27021500 


0BA9EB897 


7AA81AA9D5 


0 


0 


1 


1 


0 


01 


10 


10 


200 


161 


02D2201 


4EO42A00 


1753D712B 


75503553AB 


0 


0 


0 


0 


1 


00 


01 


10 


201 


162 


05A4403 


1C0SS400 


0EA7AE25C 


6AA06AA7 5e 


0 


0 


1 


1 


0 


10 


00 


01 


202 


163 


0B48807 


3810AB00 


1D4F5C4B8 


5540D54EAC 


1 


0 


1 


0 


0 


00 


10 


00 
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203 


164 


169100F 


70215000 


1A9EB8971 


2AS1AA9058 


0 


0 


1 


1 


0 


00 


00 


10 


204 


165 


0D2201E 


6042A001 


153D712E3 


5503553ABO 


1 


0 


0 


0 


1 


00 


00 


00 


205 


166 


1A4403C 


40854002 


0A7AE2 5C6 


2A06AA7561 


1 


1 


I 


0 


1 


01 


00 


00 


206 


167 


1488079 


010A8004 


14F5C4B8D 


540D54EAC3 


0 


0 


0 


0 


1 


01 


01 


00 


207 


16S 


09I00F2 


02150009 


09EB8971B 


2eiAA905S6 


1 


0 


1 


0 


1 


11 


01 


01 


20B 


169 


12201E5 


042A0012 


13D712E37 


5035S3AB0C 


0 


0 


0 


0 


1 


01 


11 


01 


209 


170 


04403CA 


08540024 


07AE25C6E 


206AA75618 


0 


0 


0 


0 


1 


11 


01 


11 


210 


171 


0880795 


10A80048 


0F5C4B8DD 


4 0DS4EAC30 


1 


1 


I 


1 


1 


11 


11 


01 


211 


172 


1100F2A 


21500091 


1EB8971BA 


01AA9D5861 


0 


0 


1 


1 


I 


11 


11. 


11 


212 


173 


0201E54 


42A00122 


1D712E374 


03553AB0C3 


0 


1 


1 


0 


1 


11 


11 


11 


213 


174 


0403CA9 


05400244 


1AE2 5C6E9 


06AA756186 


0 


0 


1 


1 


1 


11 


11 


11 


214 


175 


0807952 


0A800488 


15C4B8DD3 


0D54EAC30D 


1 


1 


0 


0 


1 


11 


11 


11 


215 


176 


100F2A5 


15000911 


0B8971BA6 


1AA9D5861A 


0 


0 


I 


1 


1 


11 


11 


11 


216 


177 


001ES4A 


2A001223 


1712E374C 


3S53AB0C3S 


0 


0 


0 


0 


1 


00 


11 


11 


217 


178 


003CA94 


54002446 


0E25C6E98 


6AA756ie6A 


0 


0 


1 


1 


0 


11 


00 


11 


218 


179 


0079528 


2800488D 


1C4B8DD31 


554EAC30D5 


0 


0 


1 


0 


0 


01 


11 


00 


219 


180 


00F2A50 


S000911B 


18971BA62 


2A9D5B61AA 


0 


0 


1 


I 


1 


10 


01 


11 


220 


181 


01B54A0 


20012236 


112E374C4 


553AB0C355 


0 


0 


0 


0 


0 


00 


10 


• 01 


221 


182 


03CA940 


4002446C 


025C6E988 


2A756186AA 


0 


0 


0 


0 


0 


01 


00 


10 


222 


183 


0795280 


000488D9 


04&8DD310 


54EAC3 0D54 


0 


0 


0 


1 


0 


00 


01 


00 


223 


184 


0F2AS00 


000911B2 


0971BA620 


2 9DS8 61AA8 


1 


0 


1 


1 


1 


10 


00 


01 


224 


185 


1F54A00 


00122364 


12B374C40 


53AB0C3S50 


1 


0 


0 


1 


0 


00 


10 


00 


225 


186 


1CA94 00 


002446C8 


05C6E9880 


2 756186AA0 


I 


0 


0 


0 


1 


01 


00 


10 


226 


187 


1952800 


00488D90 


0B8DD3101 


4EAC3 0D540 


1 


0 


1 


I 


0 


11 


01 


00 


227 


188 


.12A5000 


00911B20 


171BA6202 


1DS861AA81 


0 


1 


0 


0 


0 


10 


11 


01 


228 


189 


054A000 


01223640 


0E374C404 


3AB0C35502 


0 


0 


1 


1 


0 


10 


10 


11 


229 


190 


0A94000 


02446CB0 


1C6E98808 


7561B6AA05 


1 


0 


1 


0 


0 


01 


10 


10 


230 


191 


1528001 


048BD901 


18DD31011 


6AC30D540B 


0 


1 


1 


1 


0 


10 


01 


10 


231 


192 


0A50003 


0911B203 


11BAS2023 


55S61AA817 


1 


0 


0 


1 


0 


11 


10 


01 


232 


193 


14A0006 


12236407 


0374C4047 


2B0C35502F 


0 


0 


0 


0 


1 


11 


11 


10 


233 


194 


094000C 


2446C80E 


06E98S08E 


56186AA05F 


1 


0 


0 


0 


0 


11 


11 


11 


234 


195 


1280018 


488D901C 


0DD31011D 


2C30D540BF 


0 


1 


1 


0 


1 


11 


11 


11 


235 


196 


0500030 


111B2039 


1BA62023A 


S861AA817E 


0 


0 


1 


0 


0 


11 


11 


11 


236 


197 


0A00060 


22364072 


174C40475 


30C35502FD 


1 


0 


0 


1 


1 


11 


11 


11 


237 


198 


14000CO 


446C80E4 


OE98808BA 


6186AA05FB 


0 


0 


1 


1 


1 


11 


11 


11 


238 


199 


0800180 


08D901C8 


1D31011O5 


430D540BF6 


1 


1 


1 


0 


0 


10 


11 


11 


239 


200 


1000301 


11B20391 


'1A62 023AB 


061AA817EC 


0 


1 


1 


0 


0 


10 


10 


11 



Z[0] 




25 


zti] 




45 


Z[2J 




6B 


Z[3] 




55 


Z[4] 




5F 


Z[5] 




C3 


Z[61 




20 


ZC71 




ES 


Z[B1 




C4 


Z[9J 




F8 


Z[10l 




3A 


Z[11J 




Fl 


ZC121 




FF 


Z[13] 




89 


Z[14] 




02 


zei5] 




35 



Reload this pattern into the LFSRa 
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Hold content of Summation Combiner regs and calculate new C[t+ll and Z values 



LFSRl <= 1C45F2S 

LFSR2 <= 7FF8C245 

LFSR3 <= 1893A206B 

LFSR4 <= 1A02F1E55S 

Ctt+lJ <= 10 



Generating 12 5 key symbols {encryption/decryption sequence) 



240 


1 


1C45F2S 


7FF8C245 


1893A206B 


1A02F1E555 


1 


1 


1 


0 


1 


10 


10 


11 


241 


2 


188BE4A 


7FF1848B 


1127440D7 


3405E3CAAB 


1 


1 


0 


0 


0 


01 


10 


10 


242 


3 


1117C95 


7FE30917 


024E881AF 


680BC79557 


0 


1 


0 


0 


0 


01 


01 


10 


243 


4 


022F92B 


7FC6122F 


049D1035B 


50178F2AAF 


0 


1 


0 


0 


0 


11 


01 


01 


244 


5 


045F257 


7F8C245E 


093A206BD 


202F1E555B 


0 


1 


1 


0 


1 


10 


11 


01 


245 


6 


08BE4AE 


7F1848BC 


127440D7A 


405E3CAABC 


1 


0 


0 


0 


1 


01 


10 


11 


246 


7 


117C95C 


7E309178 


04E881AF4 


0OBC795579 


0 


0 


0 


1 


0 


01 


01 


10 


247 


8 


02F92B3 


7C6122F0 


09D1035E8 


0178F2AAF2 


0 


0 


1 


0 


0 


11 


01 


01 


248 


9 


05F2570 


78C245E1 


13A2 06BD0 


02F1E555B5 


0 


1 


0 


1 


1 


10 


11 


01 


249 


10 


0BE4AE1 


71848BC2 


0744 0D7A0 


05E3CAABCA 


1 


1 


0 


1 


1 


10 


10 


11 


250 


11 


17C95C3 


63091784 


0E881AF40 


0BC7955795 


0 


0 


1 


1 


0 


01 


10 


10 


251 


12 


0F92B87 


46122F09 


1D103SE80 


178F2AAF2B 


1 


0 


1 


1 


0 


10 


01 


10 


252 


13 


1F2570F 


0C245B12 


1A2 0 6BD01 


2F1E555E56 


1 


0 


1 


0 


0 


11 


10 


01 


253 


14 


1E4AS1F 


1343BC25 


1440D7A03 


5E3CAABCAC 


1 


0 


0 


0 


0 


oo 


11 


10 


254 


15 


1C95C3E 


3091784A 


0881AF407 


3C79S57958 


1 


1 


1 


0 


1 


11 


00 


11 


255 


16 


192B8 7D 


6122F094 


11035E80F 


78F2AAF2B1 


1 


0 


0 


1 


1 


01 


11 


00 


256 


17 


12570FA 


4245B128 


0206BD01E 


71E555E562 


0 


0 


0 


1 


0 


10 


01 


11 


257 


18 


04AE1F4 


048BC250 


040D7A03D 


63CAABCAC5 


0 


1 


0 


1 


0 


11 


10 


01 


258 


19 


095C3B8 


091784A0 


081AF407A 


479557958A 


1 


0 


1 


1 


0 


01 


11 


10 


259 


20 


12B87D1 


122F0941 


1035E80F4 


0F2AAF2B14 


0 


0 


0 


0 


1 


11 


01 


11 


260 


21 


0570FA3 


245E1283 


006BD01E9 


1ES55BS628 


0 


0 


0 


0 


1 


01 


11 


01 


261 


22 


0AE1F4S 


48BC2S06 


O0D7AO3D2 


3CAABCAC50 


1 


1 


0 


1 


0 


01 


01 


11 


262 


23 


15C3E8C 


11784A0C 


01AF407A5 


79557958A0 


0 


0 


0 


0 


1 


10 


01 


01 


263 


24 


0B87D18 


22F09419 


035E80F4A 


72AAF2B140 


1 


1 


0 


1 


1 


11 


10 


01 


264 


25 


170FA30 


45E12832 


06BD01E94 


6555E56280 


0 


1 


0 


0 


0 


00 


11 


10 


265 


26 


0E1F460 


OBC25065 


0D7A03D28 


4AABCAC501 


1 


1 


1 


1 


0 


00 


00 


11 


266 


27 


1C3E8C0 


1784A0CB 


1AF407AS0 


1557958A03 


1 


1 


1 


0 


1 


01 


00 


00 


267 


28 


187D181 


2F094196 


15S8 0F4A0 


2AAF2B1406 


1 


0 


0 


1 


1 


00 


01 


00 


268 


29 


10FA302 


5E12832C 


OBD01E941 


S5SE56280C 


0 


0 


1 


0 


1 


11 


00 


01 


269 


30 


01F4604 


3C250658 


17A03D2 83 


2ABCAC5019 


0 


0 


0 


1 


0 


01 


11 


00 


270 


31 


03E8C09 


784A0CB0 


0F407A506 


557958A033 


0 


0 


1 


0 


0 


10 


01 


11 


271 


32 


07D1812 


70941960 


1E80F4AOC 


2AF2B14066 


0 


1 


1 


1 


1 


11 


10 


01 


272 


33 


0FA3024 


612832C1 


1D01E9419 


55E5e280CD 


1 


0 


1 


1 


0 


01 


11 


10 


273 


34 


1F46049 


42506583 


1A03D2832 


2BCAC5019A 


1 


0 


1 


1 


0 


01 


01 


11 


274 


35 


1E8C093 


04AOCB07 


1407A5065 


579S8A0335 


1 


1 


0 


1 


0 


00 


01 


01 


275 


36 


1D18127 


0941960F 


080F4AOCB 


2F2B14066B 


1 


0 


1 


0 


0 


10 


00 


01 


276 


37 


1A3 024F 


12832C1F 


101B94196 


5E56280CD7 


1 


1 


0 


0 


0 


00 


10 


00 


277 


38 


146049F 


2506583E 


003D2832C 


3CAC5019AE 


0 


0 


0 


1 


1 


01 


00 


10 


278 


39 


08C093E 


4A0CB07D 


007A50658 


7958A0335D 


1 


0 


0 


0 


0 


00 


01 


00 


279 


40 


H8127C 


141960FA 


00F4A0CB0 


72B14066BA 


0 


0 


0 


1 


1 


11 


00 


01 


230 


41 


03024F8 


2832C1F4 


01B941961 


656280CD74 


0 


0 


0 


0 


1 


10 


11 


00 


281 


42 


06049F1 


50e583Eg 


03D2832C2 


4AC5019AE9 


0 


0 


0 


1 


1 


01 


10 


11 


282 


43 


0C0 93E2 


20CB07D2 


07A50658S 


158A0335D3 


1 


1 


0 


1 


0 


10 


01 


10 


283 


44 


18127C5 


419eOFA5 


0F4A0CB0B 


2B14066BA7 


1 


1 


1 


0 


1 


11 


10 


01 


234 


45 


1024F8A 


032C1F4B 


1E9419616 


56280CD74F 


0 


0 


1 


0 


0 


00 


11 


10 


2BS 


46 


0049F15 


06583E97 


lD2a32C2C 


2C5019AE9F 


0 


0 


1 


0 


I 


10 


00 


11 
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286 


47 


0093B2B 


OCB07D2F 


1AS065859 


58A0335D3E 


0 


1 


1 


1 


1 


00 


10 


00 


287 


48 


0127C56 


19eOFA5B 


14A0CB0B2 


314066BA7D 


0 


0 


0 


0 


0 


01 


00 


10 


288 


49 


024F8AD 


32C1F4BC 


094196164 


6280CD74FB 


0 


1 


1 


1 


0 


11 


01 


00 


289 


50 


049F15A 


6583E978 


12832C2C8 


45019AB9F6 


0 


1 


0 


0 


0 


10 


XI 


01 


290 


51 


093E2B5 


4B07D2F0 


050658591 


0A033 5D3ED 


1 


0 


0 


0 


1 


01 


10 


11 


291 


52 


127CS6B 


160FA5B0 


0A0CB0B22 


14066BA7DA 


0 


0 


1 


0 


0 


01 


ox 


10 


292 


53 


04F8AD7 


2C1F4BC1 


141961645 


280CD74FB5 


0 


0 


0 


0 


1 


10 


ox 


01 


293 


54 


09F15AF 


583E9783 


0832C2C8A 


S019AE9F6A 


1 


0 


1 


0 


0 


11 


10 


01 


294 


55 


13E2B5E 


307D2F06 


106S8591S 


20335D3ED5 


0 


0 


0 


0 


1 


11 


IX 


10 


295 


56 


07C56BD 


60FASE0D 


O0C60B22B 


4066BA7DAA 


0 


1 


0 


0 


0 


11 


11 


11 


295 


57 


0F8AD7A 


41F4BC1B 


019616457 


00CD74FB54 


I 


1 


0 


1 


0 


10 


11 


11 


297 


58 


1F15AF4 


03E97e36 


032C2C8AF 


019AE9F6A9 


1 


X 


0 


1 


I 


10 


10 


11 


298 


59 


1E2B5E9 


07D2F06C 


06585915E 


0335D3ED52 


1 


1 


0 


0 


0 


01 


10 


10 


299 


60 


IC56BD2 


0FA5E0D8 


0CB0B22BC 


06eBA7DAA4 


1 


1 


1 


0 


0 


xo 


ox 


xo 


300 


61 


18AD7A5 


1F4BC1B0 


196164578 


0CD74FB549 


1 


0 


1 


1 


I 


11 


xo 


ox 


301 


62 


115AF4B 


3E978361 


12C2C8AF0 


19AE9F6A92 


0 


1 


0 


I 


I 


00 


XX 


xo 


302 


62 


02B5B96 


7D2F06C2 


0585915B0 


3 3 5D3 ED524 


0 


0 


0 


0 


0 


10 


00 


11 


303 


64 


056BD2D 


7A5E0D85 


0B0B22BC1 


66BA7DAA49 


0 


0 


1 


1 


0 


00 


10 


00 


304 


65 


0AD7A5B 


74BC1B0A 


161645783 


4D74FB5493 


^ 


1 


0 


0 


0 


00 


00 


10 


305 


66 


15AF4B6 


69783615 


OC2C8AF07 


1AE9F6A926 




0 


1 


1 


0 


01 


00 


00 


306 


67 


0B5E96D 


52F06C2B 


185915E0F 


35D3ED524C 




1 


1 


1 


1 


11 


01 


00 


307 


68 


16BD2DB 


25E0D857 


10B22BC1F 


6BA7DAA499 




1 


0 


1 


1 


10 


11 


01 


308 


69 


0D7A5B7 


4BC1B0AF 


01645783F 


574FB54933 




1 


0 


0 


0 


10 


10 


11 


309 


70 


IAF4B6F 


178361SF 


02C8AF07F 


2E9F6A9266 




1 


0 


1 


1 


01 


10 


10 


310 


71 


15E96DF 


2F06C2BF 


05915E0FF 


5D3ED524CC 




0 


0 


0 


1 


00 


01 


10 


311 


72 


0BD2DBF 


5E0D857F 


0B22BC1FE 


3A7DAA4998 




0 


1 


0 


0 


10 


00 


01 


312 


73 


17A5B7F 


3C1B0AFB 


1645783FD 


74FB54933 1 




0 


0 


1 


1 


XI 


xo 


00 


313 


74 


0F4B6FF 


783615FD 


0C8AF07FA 


69F6A92662 . 




0 


1 


X 


0 


01 


11 


10 


314^ 


75 


1E96DFF 


706C2BFB 


1915B0FF5 


53ED524CC4 




0 


1 


1 


0 


01 


ox 


11 


315 


76 


1D2DBFE 


60D857F6 


122BCIFEB 


27DAA49988 




1 


0 


1 


0 


00 


01 


01 


316 


77 


1A5B7FD 


41B0AFEC 


045783FD7 


4FB5493310 




1 


0 


1 


1 


10 


00 


01 


317 


78 


14B6FFA 


03615FD8 


0 8AF07FAE 


1F6A926620 




0 


1 


0 


1 


11 


10 


00 


318 


79 


096DFF4 


06C2BFB1 


115E0FF5D 


3ED52 4CC40 




1 


0 


1 


0 


01 


11 


10 


319 


80 


12DBFE8 


0D857F63 


02BC1FEBB 


7DAA499881 




1 


0 


1 


1 


10 


01 


11 


320 


61 


05B7FD0 


1B0AFEC6 


05783FD77 


7B54933103 




0 


0 


0 


0 


00 


10 


01 


321 


82 


0B6FFA1 


361SFD8C 


0AF07FABF 


76A9266206 




0 


1 


1 


1 


00 


00 


xo 


322 


83 


16DFF42 


6C2BFB18 


15E0FF5DE 


6D524CC40C 




0 


0 


0 


0 


00 


00 


00 


323 


84 


0DBFE85 


5857F631 


OBCIFEBBD 


5AA4998819 




0 


1 


I 


1 


01 


00 


00 


324 


85 


IB7PD0B 


3 0AFEC62 


1783FD77A 


3549331033 




1 


0 


0 


1 


00 


ox 


00 


325 


86 


16FFA16 


615FD8C5 


0F07FAEF5 


6A92662067 




0 


1 


1 


0 


10 


00 


01 


326 


87 


0DFF42D 


42BFB18B 


1E0FF5DEA 


5524CC40CB 




1 


I 


0 


1 


00 


10 


00 


327 


88 


1BFE8SB 


057F6317 


1C1FEBBD5 


2A4998619C 




0 


1 


0 


0 


00 


00 


10 


328 


89 


17FD0B7 


0AFEC62E 


1B3FD77AA 


5493310339 




1 


1 


1 


1 


01 


00 


00 


329 


90 


0FFA16F 


15FD8C5C 


107FAEF55 


2926620672 




1 


0 


0 


1 


00 


ox 


00 


330 


91 


1PF42DF 


2BFB18B9 


O0FF5DEAA 


524CC40CE5 




1 


0 


0 


0 


10 


00 


01 


331 


92 


1FE85BF 


57F63172 


01FEBBD55 


24998819CA 




1 


0 


1 


1 


00 


xo 


00 


332 


93 


1FD0B7F 


2FEC62E4 


03FD77AAA 


4933103394 




1 


0 


0 


0 


00 


00 


xo 


333 


94 


1FA16FF 


5FD8C5C9 


07FAEF555 


1266206728 




1 


0 


0 


0 


01 


00 


00 


334 


95 


1F42DFF 


3FB18B93 


0FF5DBAAA 


24CC40CES1 




I 




1 


1 


XX 


ox 


00 


335 


96 


1E8SBFF 


7F631727 


1FEBBD5S4 


4998819CA3 




0 




1 


0 


XX 


IX 


ox 


336 


97 


1D0B7FB 


7EC62E4F 


1FD77AAA9 


1331033947 




I 




0 


0 


xo 


IX 


XX 


337 


98 


1A16FFC 


7D8C5C9F 


1FAEF5553 


266206728E 




1 




0 


1 


xo 


10 


XX 


338 


99 


142DFF9 


7B18B93F 


1F5DEAAA7 


4CC40CE51D 


0 


0 




1 


0 


01 


10 


xo 


339 


100 


08SBFF3 


7631727F 


1EBBD554B 


198B19CA3B 


1 


0 




1 


0 


10 


01 


10 


340 


101 


10B7FE6 


6C62E4FF 


1D77AAA9C 


3310339477 


0 


0 




0 


1 


00 


10 


ox 


341 


102 


016FFCC 


58C5C9FE 


1AEF55538 


66206728EH 


0 


I 




0 


0 


00 


00 


xo 


342 


103 


02DFF98 


318B93FC 


15DEAAA70 


4C40CE51DC 


0 


1 


0 


0 


1 


00 


00 


. 00 
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Bluetooth. 



343 


104 


05BFF31 


531727F8 


0BBD554E1 


18819CA3B9 


0 


0 


1 


1 


0 


01 


00 


00 


344 


105 


0B7FE62 


462E4FF1 


177AAA9C2 


3103394772 


1 


0 


0 


0 


0 


00 


01 


00 


345 


106 


16FFCC5 


0C5C9FE2 


0EF5S5384 


620672aEE4 


0 


0 


I 


0 


1 


11 


00 


01 


346 


107 


0DFF98A 


18B93FC4 


1DBAAA709 


440CE51DC9 


I 


1 


1 


0 


0 


00 


11 


00 


347 


108 


1BFF315 


31727F88 


1BD5 54E12 


0819CA3B93 


1 


0 


1 


0 


0 


11 


00 


11 


34B 


109 


17FB62A 


62E4FF11 


17A_AA9C24 


1033947726 


0 


1 


0 


0 


0 


01 


11 


00 


349 


110 


0FFCC54 


45C9FE22 


0F5553849 


206728EE4C 


1 


I 


1 


0 


0 


01 


01 


11 


350 


111 


1FF98A8 


0B93FC44 


1EAAA7093 


40CE51DC99 


1 


1 


1 


1 


1 


00 


01 


01 


351 


112 


1FF3150 


1727F889 


1D554E127 


019CA3B933 


1 


0 


1 


1 


1 


10 


00 


01 


352 


113 


1FE62A0 


2E4FF112 


1AAA9C24F 


0339477267 


1 


0 


1 


0 


0 


00 


10 


00 


353 


114 


1FCC541 


5C9FE225 


15553849E 


06728EE4CF 


1 


1 


0 


0 


0 


00 


00 


10 


354 


115 


1F98A82 


393FC44B 


0AAA7093C 


0CE51DC99F 


1 


0 


1 


1 


1 


01 


00 


00 


355 


116 


1F31504 


727F8897 


1554E1279 


19CA3B933E 


1 


0 


0 


X 


1 


00 


01 


00 


356 


117 


1E62A09 


64FF112F 


0AA9C24F2 


339477267D 


1 


1 


1 


1 


0 


01 


00 


01 


357 


lis 


1CCS412 


49FE225B 


1553849E4 


6728EE4CFB 


1 


1 


0 


0 


1 


00 


01 


00 


356 


119 


198A824 


13FC44BC 


0AA7093C9 


4E51DC99F7 


1 


1 


1 


0 


1 


10 


00 


01 


359 


120 


1315049 


27F88979 


154E12792 


1CA3B933BE 


0 


1 


0 


1 


0 


00 


10 


00 


360 


121 


062A093 


4FF112F3 


0A9C24F24 


39477267DC 


0 


1 


1 


0 


0 


00 


00 


10 


361 


122 


0C54127 


1FE225E6 


153849E48 


728EE4CFB8 


1 


1 


0 


1 


1 


01 


00 


00 


362 


123 


18A824E 


3FC44BCD 


0A7093C91 


651DC99F71 


1 


1 


1 


0 


0 


11 


01 


00 


363 


124 


115049C 


7F88979A 


14E127922 


4A3B933EE2 


0 


1 


0 


0 


0 


10 


11 


01 


364 


125 


02A0938 


7F112F35 


09C24F244 


1477267DC5 


0 


0 


1 


0 


I 


01 


10 


11 
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1.4 THIRD SET OF SAMPLES 



Bluetooth. 



Initial 


values 


for the key. 


pan 


address and 


clock 






K'C3 [OJ 


- FF 


K'c3[l] 


- FF 


K'C3[2I 




FF 


K'C3[31 - 


FF 


K'C3[41 


= FF 


K'c3C5l 


- FF 


K'C3 [61 




FF 


K'C3[71 - 


FF 


K'C3 C8] 


- FF 


K'c3 [9J 


- FF 


K'c3 ClO] 




FF 


K'C3[111 - 


FF 


K'C3 [12J 


o FF 


K'c3 [13] 


« FF 


K'C3 [14] 




FF 


K'C3[15I « 


FF 


Addr3 [0] 


= FF 


Addr3Cll = 


FF 


Addr3[2] = 


FF 








Addr3 (31 


o FF 


Addr3[4l - 


FF 


Addr3[5l = 


FF 








Clk3 CO) 


» FF 


Clk3[ll - 


FF 


Clk3[2] = 


FF 




Clk3[3l . 03 





Fill LFSRs with initial data 



t 


clk# 


LFSRl 


LFSR2 


LFSR3 


LFSR4 


XI 


X2 


X3 


X4 


z 


C[t + ll 


c[ti 


ct 


0 


0 


0000000* 


00000000* 


000000000* 


0000000000* 


0 


0 


0 


0 


0 


00 


00 


00 


1 


1 


0000001* 


00000001* 


000000001* 


0000000001* 


0 


0 


0 


0 


0 


00 


00 


00 


2 


2 


0000003* 


00000002* 


000000003* 


0000000003* 


0 


0 


0 


0 


0 


00 


00 


00 


3 


3 


0000007* 


00000004* 


000000007* 


0000000007* 


0 


0 


0 


0 


0 


00 


00 


00 


4 


4 


OOOOOOF* 


00000009* 


OOOOOOOOF* 


OOOOOOOOOF* 


0 


0 


0 


0 


0 


00 


00 


00 


5 


5 


OOOOOIF* 


00000013* 


OOOOOOOIF* 


OOOOOOOOIF* 


0 


0 


0 


0 


0 


00 


00 


00 


6 


6 


000003F* 


00000027* 


00000003F* 


000000003F* 


0 


0 


0 


0 


0 


00 


00 


00 


7 


7 


000007F* 


0000004F* 


00000007F* 


000000007F* 


0 


0 


0 


0 


0 


00 


00 


00 


8 


8 


OOOOOFF* 


0000009F* 


OOOOOOOFF* 


OOOOOOOOFF* 


0 


0 


0 


0 


0 


00 


00 


00 


9 


9 


OOOOIFF* 


0000013F* 


OOOOOOIFF* 


OOOOOOOIFF* 


0 


0 


0 


0 


0 


00 


00 


00 


10 


10 


00003FF* 


000002 7F* 


0000003FF* 


00000003FF* 


0 


0 


0 


0 


0 


00 


00 


00 


11 


11 


00007FF* 


000004 FF* 


0000007FF* 


00000007FF* 


0 


0 


0 


0 


0 


00 


00 


00 


12 


12 


OOOOFFF* 


000009 FF* 


OOOOOOPFF* 


OOOOOOOFPF* 


0 


0 


0 


0 


0 


00 


00 


00 


13 


13 


OOOIFFF* 


000013FF* 


OOOOOIFFF* 


ODOOOOIFFF* 


0 


0 


0 


0 


0 


00 


00 


00 


14 


14 


0003FFF* 


000027FF* 


000003FFF* 


0000003FFF* 


0 


0 


0 


0 


0 


00 


00 


00 


15 


15 


0007FFF* 


00004FFF* 


000007FFP* 


0000007FFF* 


0 


0 


0 


0 


0 


00 


00 


00 


16 


16 


OOOFFFF* 


00009PFF* 


OOOOOFFFF* 


OOOOOOFFFF* 


0 


0 


0 


0 


0 


00 


00 


00 


17 


17 


OOIFFFF* 


00013FFP* 


OOOOIFFFF* 


OOOOOIFFPF* 


0 


0 


0 


0 


0 


00 


00 


00 


18 


18 


003FFFF* 


00027FFF* 


00003FPFP* 


000003FFFF* 


0 


0 


0 


0 


0 


00 


00 


00 


19 


19 


007FFFF* 


0004FFFF* 


00007FFFP* 


000007FFFF* 


0 


0 


0 


0 


0 


00 


00 


00 


20 


20 


OOPFPFP* 


0009FPFF* 


OOOOFFFFF* 


OOOOOFFFFF* 


0 


0 


0 


0 


0 


00 


00 


00 


21 


21 


OlFFFFF* 


0013PFFF* 


OOOIFFPFF* 


OOOOIFPFFP* 


0 


0 


0 


0 


0 


00 


00 


00 


22 


22 


03FFFFF* 


0027FFFF* 


0003FFPFF* 


00003FFFFF* 


0 


0 


0 


0 


0 


00 


00 


00 


23 


33 


07FFFFF* 


004FFFFF* 


0007FFFFF* 


00007FFFFF* 


0 


0 


0 


0 


0 


00 


00 


00 


24 


24 


OFFFFFF* 


009FPFFF* 


OOOFPPFFF* 


OOOOPPPFFF* 




1 


0 


0 


0 


01 


00 


00 


25 


25 


IFFFFFF* 


013FPFFF* 


OOIFPFFFF* 


OOOIFPPFFF* 




0 


0 


0 


1 


00 


00 


00 


26 


26 


IFFFFFF 


027FFFFF* 


003FFFFFF* 


0003FFFFFF* 




0 


0 


0 


1 


00 . 


00 


00 


27 


27 


IFFFFFF 


04FFFFFF* 


007FFFFFF* 


0007FFFFFF* 






0 


0 


0 


01 


00 


00 


28 


28 


IFFFFFF 


09FFFFFF* 


OOFFFFFFF* 


OOOFFFFFFF* 






0 


0 


0 


01 


00 


00 


29 


29 


IFFFFFF 


13FFFFFF* 


OlFPFFFFF* 


OOIFFFFFFF* 






0 


0 


0 


01 


00 


00 


30 


30 


IFFFFFF 


27FFFFFF* 


03FFFPFFP* 


003PFPPFFF* 






0 


0 


0 


01 


00 


00 


31 


31 


IFFFFFF 


4FFFFFPF* 


07FFPFFFF* 


007FFFPFFF* 






0 


0 


0 


01 


00 


00 


32 


32 


IFFFFFF 


IFFFFFFP 


OFFFPFFFF* 


OOPPPPPFFF* 






1 


1 


0 


10 


00 


00 


33 


33 


IFFFFFF 


3FFPFFFS 


IFPFFPFFF* 


OlFFFFFFPF* 






1 


1 


0 


10 


00 


00 


34 . 


34 


IFFFFFF 


7FFPFFFC 


IFPFPPFPF 


03PFFFFFFF* 






1 


1 


0 


10 


00 


00 
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Bluetooth. 



3 5 


35 


IFFFFFF 


7FFFFFF9 


IFFFFFFFF 


07FFFFFFFF* 








0 


10 


00 


00 


3 6 


36 


IFFFFFF 


7FFFFFF3 


IFFFFFFFF 


OFFFFFFFFF* 








0 


10 


00 


00 


3 7 


37 


IFFFFFF 


7FFFFFE7 


IFFFFFFFF 


IFFFFFFFFF* 








0 


10 


00 


00 




38 


IFFFFFF 


7FFFFFCF 


IFFFFFFFF 


3FFFFFFFFF* 








0 


10 


00 


00 




39 


IFFFFFF 


7FFFFF9F 


IFFFFFFFF 


7FFFFFFFFF* 








0 


10 


00 


00 




Start clocking Summation Combiner 










































====== 


40 


1 


IFFFFFF 


7FFFFF3 F 


IFFFFFFFF 


/rrrrrrrrr 








0 


01 


1 0 


00 


4 1 


2 


IFFFFFF 


7FFFFE7F 


IFFFFFFFF 


/rrrrrrrrr 








1 


10 


01 


1 0 


42 


3 


IFFFFFF 


7FFFFCFF 




7 c c c c c en C" p 
/crccrrrrr 








0 


10 


10 


01 


43 


4 


IFFFFFF 


7ppppgpp 


IFFFFFFFF 


/rrrrrrrrr 








0 


00 




1 0 


44 


5 


IFFFFFF 


7FFFF3 FF 


IFFFFFFFF 


TPPtrtTppppp 
/rrrrrrrrr 








0 


11 


00 


1 0 


45 


g 


IFFFFFF 


7FFFE7FE 


IFFFFFFFF 


/rrrrrrrrr 








1 


00 




00 


4 6 


7 


IFFFFFF 


7FFFCFFC 


1 PPFT7PPPP 

1. r c r c r r C c 


/rrrrrrrrr 








0 


00 


00 


1 1 




g 


IFFFFFF 


7FFF9FF9 


1.1: r r c c r r r 


7FFFFFFFFF 








0 


10 


00 


00 




9 


ipppppp 


7FFF3 FF3 


irrrrrrrr 


7r r r r r r F r r 








0 


01 


10 


00 




10 


IFFFFFF 




IFFF FFFFF 


7FFFFFFFFF 








1 


10 


01 


10 






IFFFFFE 


7 FFCFFCC 


Irrr rrrrJS 


7FFFFFFFFF 








0 


10 


10 


01 




12 


IFFFFFC 


7FF9FF99 


1 Fpcimnrp 


7r r r r r r FFF 








0 


00 


10 


10 






1FFFFF8 




Irrrrcrco 


7FFFFFFFFF 








0 


11 


00 


10 




14 


IFFFFFO 


/ e jL f c ao / 


ircrrrrtU 


7FFFFFFFFF 








1 


00 


11 


00 


54 


15 


IFFFFEO 


t c \,c c L.i^r 


1 CPP PFT?1f 1 


7r r r r r FF FF 








0 


00 


00 


11 




16 


IFFFFCO 


7F9FF9 9F 


1 FFFFFFC3 


7FFFFFFFFF 








0 


10 


00 


00 






1FFFF80 


/ c -itr r S ja 


Ir r r rr r a 7 


7FFFFFFFFE 








1 


00 


10 


00 




18 


IFFFFOO 


7T77FT?fi7P 

f t C C/O f \^ 


irrr rrrur 


VFFFFFFFFC 








1 


00 


00 


10 




19 


± r r r £■ u X 


TfPPcnpn 


irrrrrJSllS 


Tppe*c*c*c*cca 
7FFFFFFFFO 








0 


10 


00 


00 




2 0 


IFFFCO 3 


7 9FF99F0 


1 p CP Trim "J 


7FFFFFFFF0 








0 


01 


10 


00 




2 1 


1FFF807 


7 ■* PPT 1 pn 


Irrcrro/o 


7FFFFFFFE1 








1 


10 


01 


10 




22 




fi7PPfi7pn 


1 PPPPPn Pfi 
irrr rruru 


7FFFFFFFC3 








0 


10 


10 


01 




2 3 


IFFEO IB 


APPrrpRn 




7FFFFFFF87 








0 


00 


10 


10 




24 


1FFC03C 


1 PPQQPnn 


1 PPPPO 7 n 
xr r r r j j 


7FFFFFFP0F 








0 


11 


00 


10 




25 


1FF8078 


J r r J ^ 


1 PPPPQ7fl7 


7FFFFFFE1E 








1 


00 


11 


00 


65 


26 


IFFOOFO 


7FE67C02 


IFFFFOFOF 


7FFFFFFC3C 








0 


00 


00 


11 




27 


IFEOlEl 


7FCCF805 


1 FFFpi PIP 


7FFFFFF878 








0 


10 


00 


00 




28 


1FC03C3 


7F99F0OA 


1FFFC3C3C 


7FFFFFF0 FO 








0 


01 


10 


00 


68 


29 


1F80787 


7F33E015 


1FFF87878 


TPPPPPW1 

/r b p r r SIaI 








0 


10 


01 


10 


69 


30 


IFOOFOF 


7E67C02A 


IFFFOFOFO 


TPPC*C*P^^ 

7FrrFFCJ C3 








1 


11 


10 


01 


70 


3 1 


lEO lElE 


7CCF8054 


IFFEIEIEI 


7FFFFF87 87 








1 


01 


11 


10 


7 \ 


32 


1C03C3C 


799FO0A9 


1FFC3C3C3 


/rrrrrUr Ur 








1 


01 


01 


11 


72 


33 


1807878 


73 320152 


1FF8 78787 


/ r r r r C-Lalc 








0 


00 


01 


01 


73 


34 


x.\j\j c yj c u 




Ir r U rUr UF 


7tl?PP^1^^/^ 


0 






0 


10 


00 


01 


74 


35 


OOIEIEO 


4CF8054B 


IFEIEIEIF 


7PPPPQ^O 1Q 

/r r r r o7a 78 


0 






1 


00 


10 


00 


75 


36 


003C3C1 


19F00A96 


1FC3C3C3F 


/rrrrUrOrO 


0 






1 


00 


00 


10 


76 


37 


0078783 


33E0152C 


IF878787F 


/r r r clalcJ. 


0 






1 


01 


00 


00 


77 


38 


00FOF07 


67C02A59 


IFOFOFOFF 


' r r t LiuJ Lj 


0 






0 


11 


01 


00 


7 8 


39 


OIEIEOE 


4F80S4B3 


lElElElFF 


7FFF8787 87 


0 






0 


11 


11 


01 


79 


40 


03C3C1C 


1FO0A966 


1C3C3C3FF 


7FFF0F0F0F 


0 


0 




1 


11 


11 


11 




41 


0787838 


3E0152CC 


1878787FF 


7FFE1E1E1E 


0 


0 




1 


11 


11 


11 


81 


42 


QF0F070 


7C02A598 


lOFOFOFFF 


7FFC3C3C3C 


1 


0 


0 1 


1 


11 


11 


11 


82 


43 


lElEOEO 


78054B30 


OIEIEIFFF 


7FF8787878 


1 


0 


0 1 


1 


11 


11 


11 


83 


44 


1C3C1C0 


700A9660 


03C3C3FFE 


7FF0F0F0F0 


1 


0 


0 1 


I 


11 


11 


11 


84 


45 


1878380 


60152CC0 


078787FFC 


7FE1E1E1E0 


1 


0 


0 1 


1 


11 


11 


11 


85 


46 


10F0700 


402A5980 


0F0F0FFF8 


7FC3C3C3C0 


0 


0 


1 1 


1 


11 


11 


11 


86 


47 


OlEOEOO 


0054B300 


lElElFFFO 


7F87878780 


0 


0 


1 1 


1 


11 


11 


11 


87 


48 


03C1C00 


00A96601 


1C3C3FFE0 


7FOFOFOFO0 


0 


1 


1 0 


1 


11 


11 


11 


88 


49 


0783800 


0152CC03 


18787FFC0 


7B1E1E1E01 


0 


0 


I 0 


0 


11 


11 


11 
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Bluetooth. 



89 


50 


OF07000 


02AS9806 


10FOFFF60 


7C3C3C3C03 


1 


1 


0 


0 


1 


11 


11 


11 


90 


51 


lEOEOOO 


054B300D 


OIEIFFFOO 


7878787807 


1 


0 


0 


0 


0 


11 


11 


11 


91 


52 


IClCOOl 


0A9660,1A 


O3C3FFE01 


70F0F0F00F 


1 


1 


0 


I 


0 


10 


11 


11 


92 


53 


1838003 


152CC035 


0787PFC03 


61E1B1B01B 


1 


0 


0 


1 


0 


10 


10 


11 


93 


54 


1070007 


2A59806B 


0F0FFF807 


43C3C3C03C 


0 


0 


1 


1 


0 


01 


10 


10 


94 


55 


OOEOOOF 


54B300D7 


lElFFFOOF 


0787878078 


0 


1 


1 


1 


0 


10 


01 


10 


95 


56 


OICOOIF 


29ee01AE 


IC3FFE01F 


OFOFOFOOFl 


0 


0 


1 


0 


1 


00 


10 


01 


96 


57 


038003F 


52CC035C 


187FFC03F 


1E1E1E01E2 


0 


1 


I 


0 


0 


00 


00 


10 


97 


58 


070007F 


2S9806B8 


10FFF807F 


3C3C3C03C4 


0 


1 


0 


0 


1 


00 


00 


00 


98 


59 


OEOOOFE 


4B300D71 


OlFFFOOFE 


7878780788 


1 


0 


0 


0 


I 


00 


00 


00 


99 


60 


ICOOIFD 


16601AE2 


03FFE01FD 


70F0F00F10 


I 


0 


0 


1 


0 


01 


00 


00 


100 


61 


18003FA 


2CC035C5 


0 7FFC03FB 


61E1B01E21 


1 


1 


0 


1 


0 


11 


01 


00 


101 


62 


10007F4 


59806B8B 


0FFF807F7 


43C3C03C43 


0 


1 


1 


1 


0 


11 


11 


01 


102 


63 


O000FE8 


3300D717 


IFFFOOFEE 


0787807887 


0 


0 


1 


1 


1 


11 


11 


11 


103 


64 


OOOIFDO 


6601AE2F 


IFFEOIFDC 


OFOFOOFIOB 


0 


0 


1 


0 


0 


11 


11 


11 


104 


65 


0003FAO 


4C035C5F 


IFFC03FB8 


1E1E01E21D 


0 


0 


1 


0 


0 


11 


11 


11 


105 


66 


0007F40 


1806B8BE 


IFF807F70 


3C3C03C43B 


0 


0 


1 


0 


0 


11 


11 


11 


106 


67 


000FE81 


300D717C 


IFFOOFEEl 


7878078877 


0 


0 


1 


0 


0 


IX 


11 


11 


107 


68 


001FD02 


601AE2F8 


1FE01FDC2 


7OF0OF10EF 


0 


0 


1 


1 


1 


11 


11 


11 


108 


69 


003FA05 


4035C5FO 


1FC03FB84 


61E01E21DB 


0 


0 


1 


1 


1 


11 


11 


11 


109 


70 


007F40B 


006B8BEO 


1F807F708 


43C03C43BC 


0 


0 


1 


1 


1 


11 


11 


11 


110 


71 


0OFE816 


O0D717C0 


IFOOFEEll 


0780788778 


0 


1 


1 


1 


0 


10 


11 


11 


111 


72 


01FD02C 


01AE2F81 


1E01FDC23 


OFOOFIOEFI 


0 


1 


1 


0 


0 


10 


10 


11 


112 


73 


03FA059 


03SCSF02 


1C03FB847 


1B01E21DE3 


0 


0 


I 


0 


1 


10 


10 


10 


113 


74 


07F40B3 


06B8BE05 


1807F708F 


3C03C43BC7 


0 


1 


1 


0 


0 


01 


10 


10 


114 


75 


0PE8166 


0D717C0B 


lOOFEEllB 


7807a8778F 




0 


0 


0 


0 


01 


01 


10 


115 


76 


1FD02CD 


1AE2F817 


001FDC23D 


700F10EF1F 




1 


0 


0 


1 


11 


01 


01 


116 


77 


1FA059B 


35C5F02F 


003FB847A 


601E21DE3F 




1 


0 


0 


1 


10 


11 


01 


117 


78 


1F40B37 


6B8BE05E 


007F708F4 


403C43BC7F 




1 


0 


0 


0 


10 


10 


11 


iia 


79 


1E8166E 


5717C0BD 


00FEB11E9 


00788778FF 




0 


0 


0 


1 


10 


10 


10 


119 


80 


1D02CDC 


2E2F817A 


01FDC23D3 


OOFIOEFIFE 




0 


0 


1 


0 


01 


10 


10 


120 


81 


1A059B9 


5C5F02F5 


03FB847A6 


01E21DE3FD 




0 


0 


1 


I 


01 


01 


10 


121 


82 


140B373 


38BE05EB 


07F708F4C 


03C43BC7FB 


0 


1 


0 


1 


1 


11 


01 


01 


122 


83 


08166E7 


717C0BO7 


0FEE11E98 


0788778FF7 


1 


0 


1 


1 


0 


11 


11 


01 


123 


84 


102CDCF 


62F817AE 


1FDC23D31 


OFIOEFIFEF 


0 


1 


I 


0 


1 


11 


11 


11 


124 


85 


0059B9F 


45F02F5C 


1FB847A63 


1E210B3FDB 


0 


1 


1 


0 


I 


11 


11 


11 


125 


86 


00B373E 


OBE05BB9 


1F708F4C7 


3C43BC7FBC 


0 


1 


I 


0 


1 


11 


11 


11 


126 


87 


0166E7D 


17C0BD72 


1EE11E98F 


788778FF7e 


0 


1 


1 


1 


0 


10 


11 


11 


127 


88 


02CDCFB 


2F817AE5 


1DC23D31F 


710feFlFEFl 


0 


1 


1 


0 


0 


10 


10 


11 


128 


89 


059B9F7 


5F02F5CA 


1B847A63F 


621DB3FDE2 


0 


0 


1 


0 


1 


10 


10 


10 


129 


90 


0B373EF 


3E05EB94 


1708F4C7F 


443BC7FBC4 


• 1 


0 


0 


0 


1 


10 


10 


10 


130 


91 


166B7DF 


7C0BD7 2 8 


0E11E98FF 


08778FF7e8 


0 


0 


1 


0 


I 


10 


10 


10 


131 


92 


OCDCFBB 


7817AE50 


1C23D31FF 


lOEFlFEFlO 


1 


0 


1 


1 


1 


01 


10 


10 


132 


93 ' 


19B9F70 


702F5CA1 


1847A63FE 


21DE3FDE21 


1 


0 


1 


1 


0 


10 


01 


10 


133 


94 


1373EFB 


e05EB942 


108F4C7FC 


43BC7FBC43 


0 


0 


0 


1 


I 


00 


10 


01 


134 


95 


06E7DF7 


40BD728S 


011B98FF8 


077BFF7886 


0 


1 


0 


0 


1 


01 


00 


10 


135 


96 


ODCFBEF 


017AE5 0A 


023D31FF0 


OEFIFEFIOO 


1 


0 


0 


1 


1 


00 


01 


00 


13 6 


97 


1B9F7DF 


02F5CA15 


047A63FE1 


1DB3FDE21A 


1 


1 


0 


1 


1 


10 


00 


01 


137 


98 


173EFBF 


05BB942B 


08F4C7FC3 


3BC7FBC434 


0 


1 


1 


1 


1 


00 


10 


00 


138 


99 


0E7DF7F 


0BD72856 


11E98FF87 


778FF78869 


1 


1 


0 


1 


1 


00 


00 


10 


139 


100 


ICFBEFF 


17AE50AC 


O3D31FF0F 


6F1FEF10D3 


I 


1 


0 


0 


0 


01 


00 


00 


140 


101 


19F7DFE 


2FSCA159 


07A63FE1E 


5B3FDE21A7 


I 


0 


0 


0 


0 


00 


01 


00 


141 


102 


13EFBFC 


5BB942B3 


0F4C7FC3C 


3C7FBC434F 


0 


1 


1 


0 


0 


10 


00 


01 


142 


103 


07OF7F8 


3D728S66 


1E98FF878 


78FF78869P 


0 


0 


1 


1 


0 


00 


10 


00 


143 


104 


OFBBFFO 


7AE50ACD 


1D31FF0F0 


71FEF10D3E 


1 


I 


1 


1 


0 


11 


00 


10 


144 


lOS 


1F7DFE1 


75CA1S9B 


1A63FB1E1 


63FDE21A7D 


1 


I 


1 


1 


1 


00 


11 


00 


145 


106 


IEFBFC3 


6B942B36 


14C7FC3C3 


47FBC434FB 


1 


1 


0 


1 


1 


11 


00 


11 
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146 


107 


1DF7F86 


5728566D 


098FF8786 


0FF7B869F7 




0 


1 




0 


00 


11 


00 


147 


108 


IBEFFOC 


2E50ACDB 


131FF0F0C 


1FEF10D3EF 




0 


0 




0 


11 


00 


11 


14S 


109 


17DFB19 


5CA159B6 


063FE1E19 


3FDE21A7DF 




1 


0 




1 


01 


11 


00 


149 


110 


0FBFC33 


3942B36D 


0C7FC3C32 


7FBC434FBF 




0 


1 




0 


01 


01 


11 


150 


111 


1F7F866 


728566DB 


18FF87865 


7F78869F7E 




1 


1 




0 


00 


01 


01 


151 


112 


lEFFOCC 


650ACDB6 


IIFFOFOCB 


7EF10D3EFC 




0 


0 


1 


0 


10 


00 


01 


152 


113 


1DFE199 


4A159B6D 


03FE1E196 


7DE21A7DF9 




0 


0 




0 


00 


10 


00 


153 


114 


1BFC333 


142B36DB 


07FC3C32C 


7BC434FBF3 




0 


0 




0 


00 


00 


10 


154 


115 


17F8666 


28566DB6 


0FF878659 


778869F7E6 




0 




1 


0 


01 


00 


00 


155 


116 


OEFOCCC 


50ACDB6D 


1FF0F0CB3 


6F10D3EFCC 


1 


1 


1 


0 


0 


11 


01 


00 


156 


117 


1FE1999 


2159B6DA 


1FE1E1966 


5E21A7DF99 




0 


1 


0 


1 


10 


11 


01 


157 


118 


1FC3332 


42B36DB5 


1FC3C32CC 


3C434FBF33 




1 


1 


0 


1 


10 


10 


11 


158 


119 


1F86664 


0566DB6B 


1F8786599 


78869F7E67 


1 


0 


1 


1 


1 


01 


10 


10 


159 


120 


1F0CCC8 


0ACDB6D6 


1F0F0CB33 


710D3EFCCE 


1 


1 


1 


0 


0 


10 


01 


10 


160 


121 


1E19991 


159B6DAC 


1E1E19666 


621A7DF99D 


1 


1 


1 


0 


1 


11 


10 


01 


161 


122 


1C33323 


2B36DB58 


1C3C32CCC 


4434FBF33B 




0 


1 


0 


1 


00 


11 


10 


162 


123 


1866647 


566DB6B0 


187865999 


0869F7E676 




0 




0 


0 


11 


00 


11 


163 


124 


10CCC8F 


2CDB6D60 


10F0CB333 


10D3EFCCEC 


0 


1 


0 


1 


1 


01 


11 


00 


164 


125 


019991E 


59B6DAC0 


01E196666 


21A7DF99D9 


0 


1 


0 


1 


1 


10 


01 


11 


165 


126 


033323C 


336DB580 


03C3 2CCCD 


434FBF33B3 


0 


0 


0 


0 


0 


00 


10 


01 


166 


127 


0666478 


66DB6B01 


07865999A 


069F7E6766 


0 


1 


0 


1 


0 


00 


00 


10 


167 


128 


0CCC8F0 


4DB6D603 


0F0CB3334 


0D3EFCCECD 


1 


1 


1 


0 


1 


01 


00 


00 


168 


129 


19991E1 


1B6DAC07 


lE196e669 


1A7DF99D9B 


1 


0 


1 


0 


1 


00 


01 


00 


169 


130 


•13323C3 


36DB580E 


1C32CCCD3 


34FBF33B37 


0 


1 


1 


1 


1 


10 


00 


01 


170 


131 


0664786 


6DB6B01C 


1865999A7 


69F7E6766F 


0 


1 


1 


1 


1 


00 


10 


00 


171 


132 


0CC8F0D 


5B6D6039 


10CB3334F 


53EFCCECDF 


1 


0 


0 


1 


0 


00 


00 


10 


172 


133 


1991E1A 


3 6DAC073 


01966669E 


27DF99D9BF 


1 


1 


0 


1 


1 


01 


00 


00 


173 


134 


1323C35 


6DB580E6 


032CCCD3C 


4FBF3 3B3 7E 


0 


1 


0 


1 


1 


00 


01 


00 


174 


135 


064786A 


5B6B01CD 


065999A78 


1F7E6766FC 


0 


0 


0 


0 


0 


11 


00 


01 


175 


136 


0C8F0D5 


36D6039B 


0CB3334F0 


3EFCCECDF9 


1 


1 


1 


1 


1 


00 


11 


00 


176 


137 


191E1AA 


6DAC073 7 


1966669B1 


7DF99D9BF3 


1 


1 


1 


1 


0 


00 


00 


11 


177 


138 


123C354 


5B580E6H 


12CCCD3C3 


7BF33B37E7 


0 


0 


0 


1 


1 


00 


00 


00 


178 


139 


04786A9 


36B01CDC 


05999A7a7 


77E6766FCE 


0 


1 


0 


1 


0 


01 


00 


00 


179 


140 


O8F0D53 


6D6039B8 


0B3334F0E 


6FCCECDF9C 


I 


0 


1 


1 


0 


11 


01 


00 


180 


141 


11E1AA6 


5AC07370 


166669E1D 


5F99D9BF38 


0 


1 


0 


1 


1 


10 


11 


01 


191 


142 


03C354C 


3580E6E0 


0CCCD3C3A 


3F33B37S70 


0 


1 


1 


0 


0 


10 


10 


11 


182 


143 


0786A99 


6B01CDC0 


1999A7875 


7E6766FCE1 


0 


0 


1 


0 


1 


10 


10 


10 


183 


144 


0F0D533 


Se039B81 


13334F0EB 


7CCECDF9C2 


1 


0 


0 


1 


0 


01 


10 


10 


184 


145 


1E1AAS6 


2C073703 


Q6669E1D6 


799D9BF385 


1 


0 


0 


1 


1 


01 


01 


10 


185 


146 


1C3 54CC 


580E6E06 


0CCD3C3AC 


733B37E70B 


I 


0 


1 


0 


1 


11 


01 


01 


186 


147 


186A998 


3 01CDC0C 


199A78759 


66766FCB17 


1 


0 


1 


0 


1 


10 


11 


01 


187 


148 


10D5331 


6039B818 


1334F0EB2 


4CECDF9C2F 


0 


0 


0 


1 


1 


01 


10 


11 


188 


149 


01AA662 


40737031 


0669B1D65 


19D9BF385E 


0 


0 


0 


1 


0 


01 


01 


10 


189 


150 


0354CC5 


00E6EO63 


0CD3C3ACB 


33B37E70BD 


0 


1 


1 


1 


0 


00 


01 


01 


190 


151 


06A998A 


01CDCOC6 


19A787596 


6766FCE17B 


0 


1 


1 


0 


0 


10 


00 


01 


191 


152 


0D53315 


039B818C 


134F0EB2C 


4ECDF9C2F6 


1 


1 


0 


1 


1 


00 


10 


00 


192 


153 


1AA662A 


07370318 


069E1D6S9 


1D9BF3 85ED 


1 


0 


0 


1 


0 


00 


00 


10 


193 


154 


154CC54 


0E6B063O 


0D3C3ACB3 


3B3 7E70BDB 


0 


0 


1 


0 




00 ■ 


00 


00 


194 


155 


0A9 98A8 


1CDC0C60 


1A7875967 


766FCE17B6 


1 


1 


1 


0 


^ 


01 


00 


00 


195 


156 


1533151 


39Bai8C0 


14F0EB2CB 


6CDF9C2F6C 


0 


1 


0 


1 




00 


01 


00 


196 


157 


0A662A3 


73703180 


09EID659D 


59BF385ED8 


1 


0 


1 


1 




10 


00 


01 


197 


158 


14CC547 


66E06301 


13C3ACB3A 


337E70BDB0 


0 


1 


0 


0 




11 


10 


00 


198 


159 


0998AaB 


4DC0C602 


078759675 


66FCE17B61 


1 


I 


0 


1 


0 


01 


11 


10 


199 


160 


133151D 


1B818C0S 


0F0EB2CEB 


4DF9C2F6C2 


0 


1 


1 


1 


0 


01 


01 


11 


200 


161 


0662A3B 


3703180B 


1E1D659D6 


1BF385ED85 


0 


0 


1 


1 


1 


11 


01 


01 


201 


162 


0CCS477 


6E063017 


1C3ACB3AC 


37E70BDB0B 


1 


0 


1 


1 


0 


11 


11 


01 


202 


163 


198A8EF 


5C0C602F 


187596759 


6FCE17B617 


1 


0 


1 


1 


0 


10 


11 


11 
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Bluetooth. 



203 


164 


13151DE 


3818C05F 


10EB2CBB2 


5F9C2F6C2F 


0 


0 


0 


I 


1 


01 


10 


11 


204 


165 


062A3BC 


703180BF 


010659065 


3F38SED85E 


0 


0 


0 


0 


1 


00 


01 


10 


205 


166 


0C54779 


6063017B 


0 3ACB3ACB 


7E70BDB0BD 


1 


0 


0 


0 


1 


11 


00 


01 


206 


167 


18A8EF2 


40C602FD 


075967597 


7CE17B617B 


1 


1 


0 


1 


0 


00 


11 


00 


207 


168 


1151DB4 


018C05FA 


0EB2CEB2F 


79C2F6C2F7 


0 


1 


1 


1 


1 


11 


00 


11 


208 


169 


02A3BC9 


03180BFS 


1D659D65E 


7385ED85EE 


0 


0 


1 


1 


1 


01 


11 


00 


209 


170 


0547793 


0e3017EB 


1 ACB3ACBC 


670BDB0BDC 


0 


0 


1 


0 


0 


10 


01 


11 


210 


171 


0A8EF2 7 


0C602FD6 


159675978 


4E17B617B9 


1 


0 


0 


0 


1 


00 


10 


01 


211 


172 


151DE4E 


18C05FAD 


0B2CEB2F1 


1C2F6C2F73 


0 


1 


1 


0 


0 


00 


00 


10 


212 


173 


0A3BC9C 


3180BF5A 


1659D65E3 


385ED85EE6 


I 


I 


0 


0 


0 


01 


00 


00 


213 


174 


1477938 


63017EB5 


0CB3ACBC6 


7 0BOB0BDCC 


0 


0 


I 


1 


1 


00 


01 


00 


214 


175 


08EF270 


4602FD6A 


19675978D 


617B617B99 


1 


0 


1 


0 


0 


10 


00 


01 


215 


176 


11DE4BI 


0C05FAD5 


12CEB2F1A 


42F6C2F733 


0 


0 


0 




1 


11 


10 


00 


216 


177 


03BC9C3 


180BF5AA 


0S9D65E34 


05ED85EE67 


0 


0 


0 




0 


00 


11 


10 


217 


178 


0779387 


3017EB55 


0B3ACBC68 


OBDBOBDCCF 


0 


0 


1 




0 


11 


00 


11 


218 


179 


0EF27DF 


602FD6AA 


1675978D0 


17B617B99F 


1 


0 


0 




1 


01 


11 


00 


219 


180 


1DE4E1F 


405FAO54 


0CEB2F1A1 


2F6C2F733F 


1 


0 


1 




1 


10 


01 


11 


220 


191 


1BC9C3F 


00BF5AA9 


19D6SE342 


5BD85BE67F 


1 


1 


1 




0 


10 


10 


01 


221 


182 


179387F 


017BB552 


13ACBC684 


3DB0BDCCFE 


0 


0 


0 




1 


10 


10 


10 


222 


183 


0P270FF 


02FD6AA5 


075978D09 


7B617B99FC 


1 


1 


0 




0 


01 


10 


10 


223 


184 


1E4EIFF 


05FAD54A 


0EB2F1A12 


76C2F733F9 


1 


1 


1 




1 


10 


01 


10 


224 


185 


1C9C3FE 


0BF5AA94 


1D65E3425 


6D85EE67F2 


1 


1 


1 




0 


10 


10 


01 


225 


186 


19387FD 


17BB5529 


1ACBC6846 


5B0BDCCFE4 


1 


1 


1 


0 


1 


01 


10 


10 


226 


187 


1270FFA 


2FDeAA53 


1S978D096 


3617B99FC9 


0 


1 


0 


0 


0 


01 


01 


10 


227 


186 


04E1FF5 


5FADS4A7 


0B2F1A12C 


6C2F733F93 


0 


1 


1 


0 


1 


11 


01 


01 


228 


189 


09C3FEB 


3FSAA94E 


165E34258 


585EE67F27 


1 


0 


0 


0 


0 


10 


11 


01 


229 


190 


13 87FD7 


7EB552 9C 


0CBC684B1 


30BDCCFE4F 


0 


1 


1 


1 


1 


10 


10 


11 


230 


191 


070FFAE 


7D6AA538 


1978D0962 


617B99FC9E 


0 


0 


1 


0 


1 


10 


10 


10 


231 


192 


0B1FF5C. 


7AD54A70 


12F1A12C4 


42F733F93D 


1 


1 


0 


1 


1 


01 


10 


10 


232 


193 


1C3FEB9 


75AA94E1 


05E342588 


05EE67F27A 


1 


1 


0 


1 


0 


10 


01 


10 


233 


194 


187FD73 


6B5529C3 


0BC684B10 


0BDCCFE4F4 


1 


0 


1 


1 


1 


11 


10 


01 


234 


195 


10FFAE6 


56AA53 86 


176D09621 


17B99FC9E8 


0 


1 


0 


1 


1 


00 


11 


10 


235 


196 


01FF5CC 


2D54A70C 


0F1A12C43 


2F733F93D0 


0 


0 


1 


0 


1 


10 


00 


11 


236 


197 


03FEB98 


5AA94B19 


1E3425887 


5EE67F27AI 


0 


1 


1 


1 


1 


00 


10 


00 


237 


198 


07FD731 


35529C33 


1C684B10F 


3DCCFE4F42 


0 


0 


1 


1 


0 


00 


00 


10 


238 


199 


0FFAE63 


6AA53866 


18D09621F 


7B99FC9E84 


1 


1 


1 


1 


0 


10 


00 


00 


239 


200 


1FF5CC6 


554A70CD 


11A12C43F 


7733F93D09 


1 


0 


0 


0 


1 


11 


10 


00 



Z[0] 
Z[l] 
Z[2) 
2t3] 
ZC4J 
Z[5I 
Zt6] 
Z[7] 

z[ej 

Z[9] 

Z[10) 

Z[ll] 

Z[12l 

Z[13] 

Z[14l 

2[151 



59 
3B 
EF 
07 
13 
70 
9B 
B7 
52 
8F 
3B 
B9 
AS 
AC 
BA 
9E 
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Bluetooth. 



Reload this pattern into the LFSRa 

Hold content of Sutturation Combiner regs and calculate new C[t + 1] and Z values 



LFSRl <= 1521359 

LFSR2 <= 528F703B 

LFSR3 <= 0AC3E9BEF 

LFSR4 <= 4FEAB9B707 

C[t + ll <= 00 



Generating 125 key symbols (encryption/decryption sequence) 







































0AC3 B9BEF 


4FEAB9B7 07 


0 


1 


1 




1 


00 


10 


00 






UA4 Zoo^ 




lbo7DJ 7DIS 


Ir D37J ocOr 


1 


0 


0 




0 


00 


00 


10 




3 


148 4D67 


4A3DC0ED 


0B0FA6FBD 


3 FAAE6DC1B 


0 


0 


1 




0 


01 


00 


00 






0 y U VAL r 


1 4 7 B O 1 U A 


loir 4Dr 7A 


7F33CDBO JD 


1 


0 


0 




0 


00 


01 


00 








2 or 70 JBs 


OLjE?B£r 3 


7EAB9B7U 7B 


0 


1 


1 




1 


10 


00 


0 1 


245 


6 


042 6B3C 


51EE076B 


187D37DEB 


7D5736E0F6 


0 


1 


1 




0 


00 


10 


00 


2 46 


7 


084D579 


2 3DC0ED6 


10FA6FBD7 


7AAE6DC1EC 


1 


1 


0 




1 


00 


00 


10 


247 


8 


iO^ACr 2 


4 7Bo IDAC 


Olr 4Dr 7Ar 


7 33CDBo3Do 


0 


1 


0 




1 


00 


00 


00 


248 


9 


013 59E4 


OF703B59 


03E9BEF5E 


6AB9B707B1 


0 


0 


0 




1 


00 


00 


00 


249 


1 0 


mem f^Q 


lES07bB3 


0 7D3 7ufiBD 


557 J oEOF o3 


0 


1 


0 




1 


00 


00 


00 


2 50 


11 


0406791 


3DC0ED57 


0FA6FBD7A 


2AE6DC1EC7 


0 


1 


1 




1 


01 


00 


00 


2 51 


12 


09ACF22 


7B81DACF 


1F4DF7AF4 


55CDB83D8F 


1 


1 


1 




1 


11 


01 


00 








/ /U Jo 3 ya 


1 l£70iir 3i£o 




0 


0 


1 




1 


10 


11 


01 






Ubo JL.O o 


£T7n 1 £ D ^ 
OilU / OD 


1 DJ 7 LJEBOU 


£OA?^^ ^ 

573 &EOr 63r 


0 


0 


1 




1 


01 


10 


11 






Quo 79 1 1 


5L.UED6 7 o 


1A6FBD7A1 


2E6DC1EC7E 


1 


0 


1 




1 


01 


01 


10 






1ACF2 2 3 


J O J. LrAU r U 


LtUe fi\C"kZ 


3L.UBO 3Uo r U 












11 


01 


0 1 






15 9E446 


^ n 1 s c Qun 


n CD 9 DCS Q c 


3 r U /d1 r A 


0 


0 


1 




1 


10 


1 1 


0 1 








O U / OO J 


J.J /LfCiDL/UA 


/ J OEUr o J r 4 












01 


10 


11 










U or oL) /AI 3 


D eUul iSL. / CO 




1 


0 




1 


01 


01 


10 


2 59 




u^r J J. 


U 1 U Al, r u u 


n riU "7 a "17 A 
UUr /Ar4zA 


4UBo 3 Oor Ul 


1 


1 


1 




1 


00 


01 


01 


2 60 


2 1 








Id /Blr A3 


1 


1 


1 




1 


10 


00 


0 1 










1 fUcDUDA^ 


3 oBOr o Jr 47 


0 


0 


0 




1 


11 


10 


00 


2 62 


2 3 


079 11 8C 




ur /Al 3Z 


Cnr*! T?r"7T?OI7 
OUUlCL /l£OA 


0 


1 


1 




0 


01 


11 


10 


263 


24 


0F22318 


IDACFOOE 


1F7AF42A4 


5B83D8FD1D 


1 


1 


1 




1 


01 


01 


11 


264 


25 


1E44630 


3B59E01C 


1EF5E8548 


3707B1FA3B 


1 


0 


1 


0 


1 


11 


01 


01 


265 


26 


1C88C61 


76B3C039 


1DEBD0A91 


6E0F63F477 


1 


1 


1 


0 


0 


11 


11 


01 


266 


27 


19118C3 


6D678073 


1BD7A1523 


5ClEC7EaEF 


1 


0 


1 


0 


1 


11 


11 


11 


267 


28 


1223187 


5ACFO0E6 


17AF42A46 


383D8FD1DE 


0 


1 


0 


0 


0 


11 


11 


11 


268 


29 


044630B 


359E01CC 


0F5E8548O 


707B1FA3BD 


0 


1 


1 


0 


1 


11 


11 


11 


269 


30 


088CeiC 


6B3C0399 


1EBD0A91A 


60F63F477B 


1 


0 


1 


1 


0 


10 


11 


11 


270 


31 


1118C39 


56780733 


1D7A15234 


41EC7E8EF6 


0 


0 


1 ■ 


1 


0 


10 


10 


11 


271 


32 


0231872 


2CF00E67 


1AF42A468 


03D8FD1DEC 


0 


1 


1 


1 


1 


01 


10 


10 


272 


33 


04630E5 


59E01CCE 


15E8548D1 


07B1FA3BD8 


0 


1 


0 


1 


1 


01 


01 


10 


273 


34 


Q8C61CB 


33C0399D 


0BD0A91A3 


0F63F477B1 


1 


1 


1 


0 


0 


00 


01 


01 


274 


35 


118C396 


6780733A 


17A1 52347 


1EC7E8EF63 


0 


1 


0 


1 


0 


10 


OO 


01 


275 


36 


031872D 


4F00E674 


0F42A4e8B 


3D8FD1DEC7 


0 


0 


1 


1 


0 


00 


10 


00 


276 


37 


063 0E5A 


1E01CCE8 


1E8548D1D 


7B1FA3BD8E 


0 


0 


1 


0 


1 


01 


00 


10 


277 


38 


0C61CB5 


3C0399D0 


1D0A91A3B 


763F477B1C 


1 


0 


1 


0 


1 


00 


01 


00 


278 


39 


iaC39eA 


780733A0 


1A1523477 


6C7E8EF639 


1 


0 


1 


0 


0 


10 


00 


01 


279 


40 


11872D5 


700E6741 


142A46SEF 


58FD1DEC72 


0 


0 


0 




1 


11 


10 


00 


280 


41 


030E5AB 


601CCE83 


08548D1DF 


31FA3BD8E5 


0 


0 


1 




1 


00 


11 


10 


281 


42 


061CB57 


40399D07 


10A9 1A3BF 


63F477B1CB 


0 


0 


0 




1 


10 


00 


11 


282 


43 


0C3 96AF 


00733A0F 


01523477E 


47E8EF6396 


1 


0 


0 




0 


00 


10 


00 


283 


44 


1872D5F 


0OB6741F 


02A4 68EFD 


0FD1DEC72C 


1 


1 


0 




1 


00 


00 


10 
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284 


45 


10E5ABE 


01CCE83F 


0 54801DFA 


1FA3B08E58 


0 


1 


0 


1 


0 


01 


00 


00 


285 


46 


01CB57C 


0399D07F 


0A91A3BF4 


3F477B1CB0 


0 


1 


1 


0 


1 


00 


01 


00 


286 


47 


03 96AF9 


0733A0FE 


1523477E9 


7E8EF63961 


0 


0 


0 


1 


1 


11 


00 


01 


287 


48 


072D5F3 


0E6741FD 


0A4e8BFD2 


7D1DEC72C3 


0 


0 


1 


0 


0 


01 


11 


00 


288 


49 


0E5ABE7 


1CCE83FA 


148D1DFA4 


7A3BD8E587 


I 


1 


0 


0 


1 


10 


01 


11 


289 


50 


1CB57CE 


399D07F4 


091A3BF49 


7477B1CB0F 


I 


1 


1 


0 


1 


11 


10 


01 


290 


51 


196AF9D 


733A0FE9 


123477E92 


68EF63961E 




0 


0 


X 


1 


00 


11 


10 


291 


52 


12D5F3B 


66741FD2 


04e8EFD25 


51DEC72C3C 




0 


0 


1 


I 


10 


00 


11 


292 


53 


05ABE77 


4CE83FA4 


0 8D1DFA4B 


23BD8E5879 




1 


1 


I 


1 


00 


10 


00 


293 


54 


0B57CEE 


19D07F49 


11A3BF496 


477B1CB0F2 


1 


1 


0 


0 


0 


00 


00 


10 


294 


55 


16AF9DC 


33A0FE92 


03477E92C 


0EF63961E4 




1 


0 


1 


0 


01 


00 


00 


295 


56 


0D5F3B8 


$741FD25 


068EFD259 


1DEC72C3C9 


1 


0 


0 


1 


1 


00 


01 


00 


296 


57 


1ABE771 


4E83FA4B 


0D1DFA4B3 


3BD8E58793 


1 


1 


1 


1 


0 


01 


00 


01 


297 


58 


1S7CEE2 


1D07F496 


1A3BF4967 


77B1CB0F26 




0 


1 


1 


I 


00 


01 


00 


298 


59 


OAF 9 DC 5 


3A0FE92D 


1477E92CE 


6F63961E4D 


1 


0 


0 


0 


1 


11 


00 


01 


299 


60 


15F3B8B 


741FD25A 


08EFD259C 


5EC72C3C9B 




0 


1 


1 


1 


01 


11 


00 


300 


SI 


0BE7716 


683FA4B4 


HDFA4B39 


3D8E587937 


1 


0 


0 


1 


1 


10 


01 


11 


301 


62 


17CEE2D 


507F4968 


03BF49672 


7B1CB0F26E 




0 


0 


0 


0 


00 


10 


01 


302 


63 


0F9DC5B 


20FE92O0 


077E92CE4 


763961E4DC 


1 


1 


0 


0 


0 


00 


00 


10 


303 


64 


1F3B8B6 


41FD25A0 


0EFD259C9 


6C72C3C9B9 


1 


1 


I 


0 


1 


01 


00 


00 


304 


65 


1E7716D 


03FA4B40 


1DFA4B393 


58E5879373 


1 


1 


1 


1 


1 


n 


01 


00 


305 


66 


1CEE2DB 


07F49680 


1BF496727 


31CB0F26B6 


1 


1 


1 


1 


1 


11 


11 


01 


306 


67 


19DC5B7 


0FE92D0O 


17E92CE4E 


63961E4DCD 


1 


1 


0 


1 


0 


10 


11 


11 


307 


68 


13BeB6F 


1FD25A0O 


0FD259C9C 


472C3C9B9A 




1 


1 


0 


0 


10 


10 


11 


308 


69 


07716DF 


3FA4B4 00 


1FA4B3938 


0E5e793735 




1 


1 


0 


0 


01 


10 


10 


309 


70 


0EE2DBF 


7F496800 


1F4967271 


1CB0F26E6A 




0 


1 


1 


0 


10 


01 


10 


310 


71 


1DC5B7F 


7E92D000 


1E92CE4E2 


3 961E4DCD4 




1 


1 


0 


1 


11 


, 10 


01 


311 


72 


1B8B6FF 


7D2 5A001 


1D259C9C4 


72C3C9B9A9 


1 


0 


1 


1 


0 


01 


11 


10 


312 


73 


1716DFF 


7A4B4002 


1A4B39389 


6587937352 




0 


1 


1 


1 


10 


01 


11 


313 


74 


0E2DBFF 


74968005 


149672713 


4B0F26E6A5 


1 


1 


0 


0 


0 


11 


10 


01 


314 


75 


1C5B7FE 


692D0O0B 


092CE4E26 


161E4DCD4B 


1 


0 


1 


0 


1 


00 


11 


10 


315 


76 


18B6FFC 


525A0017 


1259C9C4D 


2C3C9B9A96 


1 


0 


0 


0 


1 


10 


00 


11 


316 


77 


116DFF8 


24B4002F 


04B39389B 


587937352C 


0 


1 


0 


0 


1 


11 


10 


00 


317 


78 


02DBFF1 


4968005F 


096727136 


30F26E6A58 


0 


0 


1 


1 


1 


00 


11 


10 


318 


79 


05B7FEJ 


12D000BF 


12CE4E2 6C 


61E4DCD4B1 


0 


1 


0 


1 


0 


11 


00 


11 


319 


80 


0B6FFC7 


25A0017F 


059C9C4D8 


43C9B9A9e3 


1 


1 


0 


1 


0 


00 


11 


00 


320 


81 


16DFF8E 


4B4002FF 


6B39389B1 


07937352C6 


0 


0 


1 


1 


0 


11 


00 


11 


321 


82 


ODBPFIC 


168005FF 


167271363 


0F26E6A58C 


1 


1 


0 


0 


I 


01 


11 


00 


322 


83 


1B7FB38 


2D0OOBFP 


0CE4E26C7 


1E4DC04B18 


1 


0 


1 


0 


1 


10 


01 


11 


323 


84 


16FFC70 


5A0017FF 


19C9C4D8F 


3C9B9A9631 


0 


0 


I 


1 


0 


11 


10 


01 


324 


85 


0DFF8EI 


34002FFF 


139389B1B 


7937352C62 


1 


0 


0 


0 


0 


00 


11 


10 


325 


86 


1BFF1C3 


68005FFF 


07271363D 


726EeA58C4 


1 


0 


0 


0 


1 


10 


00 


11 


326 ' 


87 


17FE3 87 


5000BFFE 


0E4E26C7B 


64DCD4B188 


0 


0 


1 


1 


0 


00 


10 


00 


327 


88 


0FFC70P 


20017FFD 


1C9C4D8F6 


49B9A96311 


1 


0 


1 


1 


I 


00 


00 


10 


328 


89 


1FF8E1F 


4002FFFB 


19389B1ED 


137352C623 


1 


0 


1 


0 


0 


01 


00 


00 


329 


90 


1FF1C3F 


0005FFF7 


1271363DB 


26E6AS8C46 


1 


0 


0 


1 


1 


00 


01 


00 


330 


91 


1FE387F 


OOOBFFEE 


04E26C7B6 


4DCD4B188C 


1 


0 


0 


1 


0 


10 


00 


01 


331 


92 


1FC70FP 


0017FFDC 


09C4D8F6D 


1B9A963118 


1 


0 


1 


1 


1 


00 


10 


00 


332 


93 


1F8E1FF 


002FFPB8 


1389B1EDA 


37352C6231 


I 


0 


0 


0 


1 


01 


00 


10 


333 


94 


1F1C3FF 


005FFF70 


071363DB4 


6E6A58C462 


1 


0 


0 


0 


0 


00 


01 


00 


334 


95 


1E387FE 


OOBFFEEO 


0E2eC7B68 


5CD4B188C5 


1 


1 


1 


1 


0 


01 


00 


01 


335 


96 


1C70FFC 


017FFDC1 


1C4D8F6D1 


39A963118A 


1 


0 


1 


1 


0 


11 


01 


00 


336 


97 


18E1FF9 


02FFFB82 


189B1EDA2 


7352C62315 


1 




1 


0 


0 


11 


11 


01 


337 


98 


11C3FF2 


05FFF705 


11363DB45 


66AS8C462B 


0 




0 


1 


1 


11 


11 


11 


338 


99 


0387FE4 


OBFFEEOA 


026C7B68B 


4D4B188C56 


0 




0 


0 


0 


11 


11 


11 


339 


100 


070FFC9 


17FFDC15 


04D8F6D16 


1A9S3118AD 


0 




0 


1 


1 


11 


11 


11 


340 


101 


0E1FF92 


2FFFB82B 


09B1EDA2C 


352C62315A 


1 




1 


0 


0 


10 


11 


11 
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Bluetooth. 



341 


102 


1C3FF24 


5FFF7057 


1363DB4S8 


6A58C462B4 


1 


I 


0 


0 


0 


10 


10 


11 


342 


103 


187FE48 


3FFEE0AE 


06C7B6BB0 


54B188C569 


1 


1 


0 


1 


1 


01 


10 


10 


343 


104 


10FFC90 


7FFDC15C 


0D8F6D161 


2963118AD2 


0 


1 


1 


0 


1 


01 


01 


10 


344 


105 


01FF920 


7FFB82B9 


1B1EDA2C2 


52C62315A5 


. 0 


1 


1 


1 


0 


00 


01 


01 


345 


106 


03FF240 


7FF70573 


163DB4S84 


258C462B4B 


0 


1 


0 


1 


0 


10 


00 


01 


346 


107 


U7FE481 


7FEE0AE6 


OC7B6SB08 


4B188C5696 


0 


1 


1 


n 


0 


00 


10 


00 


347 


108 


0FFC902 


7FDC15CD 


18F6D1610 


163118AD2D 


1 


1 


1 


, 0 


1 


00 


00 


10 


348 


109 


1FF9204 


7FB82B9A 


11EDA2C20 


2C62315A5B 


1 


1 


0 


0 


0 


01 


00 


00 


349 


110 


1FF2408 


7F70S735 


03DB45841 


58C462B4B6 


1 


0 


0 


1 


1 


00 


01 


00 


350 


111 


1FE4810 


7EE0AE6B 


07B68B082 


3188C5696C 


1 


1 


0 


1 


1 


10 


00 


01 


351 


112 


1FC9021 


7DC1SCD6 


OF6D16105 


63118AD2D8 


1 


1 


1 


0 


1 


00 


10 


00 


352 


113 


1F92042 


7B82B9AD 


1EDA2C20B 


462315A5B0 


1 


1 


1 


0 


1 


00 


00 


10 


353 


114 


1F24084 


7705735A 


1DB45S416 


0C462B4661 


1 


0 


1 


0 


0 


01 


00 


00 


354 


115 


1E4B108 


6E0AE6B5 


1B68B082C 


188C5696C3 


1 


0 


I 


1 


0 


IX 


01 


00 


355 


116 


1C90211 


5C15CD6A 


16D161059 


3118AD2D86 


I 


0 


0 


0 


0 


10 


11 


01 


356 


117 


1920422 


382B9AD5 


0DA2 C2 0B3 


62315A5B0D 


1 


0 


1 


0 


0 


10 


10 


11 


357 


118 


1240845 


705735AA 


1B4584167 


4462B4B61A 


0 


0 


1 


0 


1 


10 


10 


10 


356 


119 


Q48108A 


60AE6B55 


168B082CF 


08CS696C34 


0 


1 


0 


1 


0 


01 


10 


10 


359 


120 


0902114 


415CD6AB 


0D161059E 


11BAD2D869 


1 


0 


1 


1 


0 


10 


01 


10 


360 


121 


1204228 


02B9AD56 


1A2C20B3D 


2315A5B0D2 


0 


1 


1 


0 


0 


11 


10 


01 


361 


122 


0408451 


05735AAD 


14584167B 


462B4B61A4 


0 


0 


0 


0 


1 


11 


11 


10 


362 


123 


08108A2 


0AB6B55B 


08B0 82CF7 


0C5696C348 


1 


1 


1 


0 


0 


10 


11 


11 


363 


124 


1021144 


15CD6AB6 


1161059EF 


18AD2D8690 


0 


1 


0 


1 


0 


10 


10 


11 


364 


125 


0042289 


2B9AD56C 


02C2 0B3DE 


315A5B0D20 


0 


1 


0 


0 


1 


10 


10 


10 
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1.5 FOURTH SET OF SAMPLES 



Init ial 


values 


for the key, 


pan 


address and 


clock 






K'C4 [OJ 


« 21 


K'C4[1] 


= 87 


K'C4 [2] 




FO 


K'C4[31 = 


4A 


K'C4C4] 


o BA 


K'c4C5] 


« 90 


K'c4 [6J 




31 


K'C4[7] . 


DO 


K'C4 [B] 


= 78 


K' C4 [91 


= OD 


K' C4 [10] 




4C 


K'C4[111 - 


53 


K'C4 [121 


a EO 


K'C4 [131 


» 15 


K'C4 [14] 




3A 


K'C4[15] a 


63 


Addr4 [01 


« 2C 


Addr4[l] = 


7F 


Addr4[2l - 


94 








Addr4[3l 


= 56 


Addr4t4] = 


OF 


Addr4[5l . 


IB 








Clk4 [01 


=r 5F 


Clk4[l] = 


lA 


Clk4[2] = 


00 




Clk4[3] = 02 





Bluetooth. 



Fill LFSRe with initial data 



t 


clk# 


LFSRl 


LFSR2 


LFSR3 


LFSR4 


XI 


X2 


X3 


X4 


z 


C[t + ll 


C[t] 


C[t 


0 


0 


0000000* 


00000000* 


000000000* 


0000000000* 


0 


0 


0 


0 


0 


00 


00 


00 


1 


1 


0000000* 


00000001* 


000000001* 


0000000001* 


0 


0 


0 


0 


0 


00 


00 


00 


2 


2 


0000001* 


00000002* 


000000002* 


0000000003* 


0 


0 


0 


0 


0 


00 


00 


00 


3 


3 


0000002* 


00000004* 


000000004* 


0000000007* 


0 


0 


0 


0 


0 


00 


00 


00 


4 


4 


0000004* 


00000009* 


000000008* 


OOOOOOOOOF* 


0 


0 


0 


0 


0 


00 


00 


00 


5 


5 


0000008* 


00000013* 


000000010* 


OOOOOOOOIE* 


0 


0 


0 


0 


0 


00 


00 


00 


6 


6 


0000010* 


00000027* 


000000021* 


000000003D* 


0 


0 


0 


0 


0 


00 


00 


00 


7 


7 


0000021* 


0000004F* 


000000043* 


000000007A* 


0 


0 


0 


0 


0 


00 


00 


00 


8 


8 


0000042* 


0000009F* 


000000087* 


0OO0OOOOF4* 


0 


0 


0 


0 


0 


00 


00 


00 


9 


9 


0000084* 


0000013F* 


OOOOOOIOF* 


0O0O0OO1E9* 


0 


0 


0 


0 


0 


00 


00 


00 


10 


10 


0000108* 


0000027F* 


00000021F* 


00000003D2* 


0 


0 


0 


0 


0 


00 


00 


00 


11 


11 


0000211* 


000004FE* 


00000043E* 


00000007A5* 


0 


0 


0 


0 


0 


00 


00 


00 


12 


12 


0000422* 


000009FC* 


00000087C* 


0O0O0OOF4A* 


0 


0 


0 


0 


0 


00 


00 


00 


13 


1,3 


0000845* 


000013F8* 


0000010F8* 


0OOOOO1E94* 


0 


0 


0 


0 


0 


00 


00 


00 


14 


14 


OOOIOBB* 


000027F0* 


0000021F1* 


0O0O0O3D29* 


0 


0 


0 


0 


0 


00 


00 


00 


15 


15 


0002117* 


00004FE1* 


0000043E3* 


0000007A52* 


0 


0 


0 


0 


0 


00 


00 


00 


16 


16 


000422E* 


00009FC2* 


0000087C6* 


0O00OOF4A4* 


0 


0 


0 


0 


0 


00 


00 


00 


17 


17 


000845D* 


00013F84* 


000010F8C* 


000001E948* 


0 


0 


0 


0 


0 


00 


00 


00 


18 


18 


00108BA* 


00027F08* 


000021F18* 


000003D290* 


0 


0 


0 


0 


0 


00 


00 


00 


19 


19 


0021174* 


0004FE10* 


000043E30* 


000007A520* 


0 


0 


0 


0 


0 


00 


00 


00 


20 


20 


00422Ea* 


0009FC21* 


000087C61* 


0OOOOF4A41* 


0 


0 


0 


0 


0 


00 


00 


00 


21 


21 


O0B4SD1* 


0013Fe42* 


00010FeC3* 


00001E9482* 


0 


0 


0 


0 


0 


00 


00 


00 


22 


22 


010eBA3* 


0027F084* 


00021P186* 


00003D2905* 


0 


0 


0 


0 


0 


00 


00 


00 


23 


23 


0211747* 


004FE109* 


00043E30C* 


00007AS20B* 


0 


0 


0 


0 


0 


00 


00 


00 


24 


24 


0422BBF* 


009FC213* 


000B7C619* 


0OOOF4A417* 


0 


1 


0 


0 


1 


00 


00 


00 


25 


25 


0845D1E* 


013F842e* 


0010F8C32* 


0001E9482F* 


1 


0 


0 


0 


1 


00 


00 


00 


26 


26 


108BA3D 


027F084D* 


0021F1864* 


0003D290SB* 


0 


0 


0 


0 


0 


00 


00 


00 


27 


27 


011747B 


04FE109B* 


0043E30C9* 


0007A520BC* 


0 


1 


0 


0 


1 


00 


00 


00 


28 


28 


022B8F6 


09FC2136* 


0087C6192* 


000F4A4179* 


0 


1 


0 


0 


1 


00 


00 


00 


29 


29 


045D1EC 


13Fa426C* 


010FBC325* 


001E9482F2* 


0 


1 


0 


0 


1 


00 


00 


00 


30 


30 


08BA3D9 


27F0e4D8* 


021F1864B* 


003D2905E5* 


1 


1 


0 


0 


0 


01 


00 


00 


31 


31 


11747B3 


4FE109B0* 


043E30C97* 


007A520BCA* 


0 


1 


0 


0 


1 


00 


00 


00 


32 


32 


02E8F67 


IFC21360 


087C6192E* 


00F4A41795* 


0 


1 


1 


1 


1 


01 


00 


00 


33 


33 


05D1BCF 


3F8426CI 


10F8C325C* 


01E9482F2B* 


0 


1 


0 


I 


0 


01 


00 


00 


34 


34 


0BA3D9F 


7F084D82 


01F1S64B8 


03D290SES6* 


1 


0 


0 


1 


0 


01 


00 


00 
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35 


35 


1747B3E 


7E109B04 


03E30C970 


07A520BCAC* 


0 


0 


0 


1 


1 


00 


00 


00 


36 


36 


0E8F67C 


7C213608 


07C6192E1 


0F4A417958* 


I 


0 


0 


0 


1 


00 


00 


00 


37 


37 


1D1ECF8 


78426C11 


0F8C325C3 


1E9482F2B1* 


1 


0 


1 


1 


1 


01 


00 


00 


38 


3 8 


1A3D9F0 


7084D822 


1F1864B86 


3D2905E563* 


1 


1 


1 


0 


1 


01 


00 


00 


3 9 


3 9 


147B3E1 


6109B044 


1B30C970C 


7A520BCAC6* 


0 


0 


1 


0 


1 


00 


00 


00 












= » = = „ = = = = = = = = 




















Sta 


rt clocking Summation Combiner 
















































40 


1 


08F67C2 


42136088 




74A417958D 


1 


0 


1 


1 


1 


01 


00 


00 


41 


2 


1 1ECF84 






69482F2B1B 


0 


0 


1 


0 


0 


00 


01 


00 


42 


3 




n o Ana 1 1 


1 1 OCADaCI 

llob4ooDi 


52905E5637 


0 


0 


0 


I 


1 


11 


00 


01 


43 


4 


U / D Jill u 


■LU70U444 


u joi, y / ULi J 


2 52 0BCAC6E 


0 


1 


0 


0 


0 


01 


11 


00 


44 


5 


Ur b f\,Z 1 




Obiy 2i£lob 


4A417958DC 


1 


0 


0 


0 


0 


10 


01 


11 


45 


6 


1ECF84 3 


426C1112 




1482F2B1B8 


1 


0 


1 


1 


1 


11 


10 


01 


46 


7 


LUy r u o D 


n Ana o o ■> c 


lob4ooo ly 


2905E56370 


1 


1 


1 


0 


0 


01 


11 


10 


47 


8 


Id J £1 UU 


nOQnA AAD 

U 4 D 


1 rt^Q^A/^^1 

lUCy 70l,J2 


520BCAC6E1 


1 


1 


0 


0 


1 


10 


01 


11 


46 


9 




1 IfrtQQOT 


rtl Q'lWI 0£C 

oiy^ EibD 3 


2417958DC3 


0 


0 


0 


0 


0 


00 


10 


01 


49 


10 


Ut,r 84 J o 


£ d(-1H2 r 


rtiic/^T rt^n 
0J23t.J0L.B 


482F2B1B87 


1 


1 


0 


0 


0 


00 


00 


10 


50 


11 


1 av no cr\ 


A^^Q 111 


0o4BSbly 7 


105E56370F 


I 


1 


0 


0 


0 


01 


00 


00 


51 


12 


1 J£iiUUo 


lo0444BU 


OCyv 0CJ2F 


2 0BCAC6E1F 


0 


0 


1 


1 


1 


00 


01 


00 


52 


13 


07C2 1B7 


■JbUooy/y 


iy2£lob3£ 


417958DC3F 


0 


0 


1 


0 


I 


11 


00 


01 


53 


14 


Ur D 4 J bis 


6C1 1 1 2 F2 


IzdL JOCBO 


02F2B1B87F 


1 


0 


0 


1 


1 


01 


11 


00 


54 


15 


1 c u OOUU 


C Q C1TA 


n Ano £1 o TO 
U400 bi.y r O 


05E56370FF 


1 


0 


0 


1 


1 


10 


01 


11 


55 


16 


l£ 1 UUoA 


J 04 44Bt.y 


rtQTrt^^ 


0BCAC6E1FF 


1 


0 


1 


1 


1 


11 


10 


01 


56 


17 


1C2 1075 


frtflflono^ 

bUooS/y J 


12il1 oo 3i£i£ 


17958DC3FF 


1 


1 


0 


1 


0 


01 


11 


10 


57 


18 




41112F27 


Acr'T rtr"nrin 


2F2B1BB7FF 


1 


0 


0 


0 


0 


10 


01 


n 


58 


19 






ABQ CIO iniL 

UBsb ly 7BA 


5E56370FFF 


0 


0 


1 


0 


1 


00 


10 


01 


59 


20 


010 UBAo 


exAAAOf^a^ 
0444BCyD 


170C J2r 74 


3CAC6E1FFF 


0 


0 


0 


1 


1 


01 


00 


10 


60 


2 1 


rt O 1 D T c n 


U So9V9 JA- 


rtwi ofcooo 
OElo D3££s 


7958DC3FFF 


0 


1 


1 


0 


1 


00 


01 


00 


61 


22 


04 3 oEAO 


1112p274 


1 ^ 1 rt A 
ICJOUBDOO 


72B1B87FFE 


0 


0 


1 


1 


0 


10 


00 


01 


62 


23 


u 9 o UU t U 


£. 3£i4 ay 


1 a c 1 of nn i 
i. Ob 1 y / DMi 


656370FFFC 


1 


0 


1 


0 


0 


00 


10 


00 


63 


24 


l.\J Utii\.0 J. 


A A An^'Q^^'I 


lUL. J 2r /4 J 


4AC6E1FFF8 


0 


0 


0 


1 


1 


01 


00 


10 


64 


25 


01B7502 


089793A7 


01865EE86 


158DC3FFF1 


0 


1 


0 


1 


1 


00 


01 


00 


65 


26 








2B1B87FFE3 


0 


0 


0 


0 


0 


11 


00 


01 


66 


27 


rt £ n nA rt n 


^^3l£4cvL 


Obiy 7BA1A 


56370FFFC6 


0 


0 


0 


0 


1 


10 


11 


00 


67 


28 


rtr\B* Q 1 T 


44oL90j y 


0Cj2 r74J4 


2C6E1FFF8D 


1 


1 


1 


0 


1 


10 


10 


11 


68 


29 


1 in crt IT? 


Uy/y JA7iJ 


1 Q e eno f o 
lobsofioDo 


58DC3FFF1B 


1 


0 


1 


1 


1 


01 


10 


10 


69 


30 


1 £^TirtCT\ 


1 'lO'l'TAWC 

12r 274Bb 


1 rtr^OT^^rt^rt 

1 DuBDDODO 


3 1B87FFE36 


0 


1 


0 


1 


1 


01 


01 


10 


70 


3 1 


UiJU4UDA 


1 ROAOaflt 

^ bi£4cy Lo 


A 1 Q Tun 1 a 1 
O ly / BAIAX 


6370FFFC6D 


1 


1 


0 


0 


1 


11 


01 


01 


71 


32 




4oi_yL/ J y / 


An C"7A 1 A I 
U3Zr r4J4J 


46E1FFF8DA 


1 


1 


0 


1 


0 


11 


11 


01 


72 


33 


1/3 \JZHiO 


1 7 93 A72 F 


A CCOSQ COT 


0DC3FFF1B4 


0 


1 


0 


1 


1 


11 


11 


11 


73 


34 


0EA05D0 


2F274BSE 


OCBDDODOF 


1B87FFE3 69 


1 


0 


1 


1 


0 


10 


11 


11 


74 


35 


1D40BA0 


5E4E9CBD 


197BA1A1F 


370FFFC6D2 


I 


0 


1 


0 


0 


10 


10 


11 


75 


36 


1A81741 


3C9D397B 


12F74343F 


6E1FFF8DA5 


1 


1 


0 


0 


0 


01 


10 


10 


76 


3 7 


1502E82 


793A72F6 


05EE8687F 


5C3FFF1B4B 


0 


0 


0 


0 


1 


00 


01 


10 


77 


38 


0A0 5D0S 


7274E5ED 


OBDDODOFF 


3S7FFE3696 


I 


0 


1 


0 


0 


10 


00 


01 


78 


39 


140BAOB 


64E9CBDA 


17BA1AIFF 


70FFFC6D2C 


0 


1 


0 




0 


00 


10 


00 


79 


40 


0817416 


49D397B4 


0F74343FE 


61FFF8DA59 


1 


1 


1 




0 


11 


00 


10 


80 


41 


102E82C 


13A72F69 


1EE8687FD 


43FFF1B4B3 


0 


1 


1 




0 


00 


11 


00 


81 


42 


005D058 


274E5ED2 


IDDODOFFA 


07FFE36966 


0 


0 


1 




0 


11 


00 


11 


82 


43 


OOBAOBO 


4E9CBOA5 


1BA1A1FF5 


0FFFC6D2CD 


0 


1 


1 




0 


00 


11 


00 


83 


44 


0174160 


1D397B4A 


174343FEA 


1FFF8DA59B 


0 


0 


0 




1 


10 


00 


11 


84 


45 


02E82C0 


3A72F695 


0E8687FD4 


3FFF1B4B37 


0 


0 


1 




0 


00 


10 


00 


85 


46 


05D0580 


74E5ED2B 


1D0D0FFA9 


7FFE36966E 


0 


1 


1 




1 


00 


00 


10 


86 


47 


OBAOBOO 


6 9CBDA5e 


1A1A1FF53 


7FFC6D2CDC 


1 


1 


1 




0 


10 


00 


00 


87 


48 


1741600 


5397B4AC 


14343FEA6 


7FF8DAS9B8 


0 


1 


0 




0 


00 


10 


00 


es 


49 


0E82C01 


272F6959 


08687FD4D 


7FF1B4B370 


1 


0 


1 




1 


00 


00 


10 



930 
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99 


50 


1D05802 


4E5ED2B3 


10D0FFA9A 


7FE36966E0 


1 


0 


0 


I 


0 


01 


00 


00 


90 


51 


1A0B004 


1CBDA566 


01A1FF535 


7FC6D2CDC0 


1 


1 


0 


1 


0 


11 


01 


00 


91 


52 


1416009 


397B4ACC 


0343FEA6B 


7F8DA59B80 


0 


0 


0 


1 


0 


10 


11 


01 


92 


53 


082C013 


72F69599 


0697FD4D7 


7F1B4B3701 


I 


1 


0 


0 


0 


10 


10 


11 


93 


54 


1058026 


6 5ED2B3 3 


0D0FFA9AF 


7E36966E03 


0 


1 


1 


0 


0 


01 


10 


10 


94 


55 


00B004D 


4BDA56 67 


1A1FF535E 


7C6D2CDC06 


0 


1 


1 


0 


1 


01 


01 


10 


95 


56 


016009B 


17B4ACCE 


143FEA6BD 


78DA59B80D 


0 


1 


0 


1 


1 


11 


01 


01 


96 


57 


02C0137 


2F69599D 


087FD407B 


71B4B3701A 


0 


0 


1 


1 


1 


10 


11 


01 


97 


58 


0S8026F 


5ED2B3 3B 


10FFA9AF6 


636966B034 


0 


1 


0 


0 


1 


01 


10 


11 


98 


59 


0B004DF 


3DA56677 


01FF535ED 


46D2CDC068 


1 


1 


0 


1 


0 


10 


01 


10 


99 


60 


16009BF 


7B4ACCEF 


0 3FEA6BDB 


0DA59B80D0 


0 


0 


0 


1 


1 


00 


10 


01 


100 


61 


0C0137F 


769599DF 


0 7FD4O7B7 


1B4B3701A1 


1 


1 


0 


0 


0 


00 


00 


10 


101 


62 


18026FE 


6D2B33BE 


0FFA9AF6E 


36966E0342 


1 


0 


1 


1 


1 


01 


00 ■ 


00 


102 


63 


1004DFC 


5AS6677D 


1FF535EDD 


6D2CDC0684 


0 


0 


1 


0 


0 


00 


01 


00 


103 


64 


0009BF9 


3 4ACCEFB 


1FEA6BDBB 


5AS9B80D09 


0 


1 


1 


0 


0 


10 


00 


01 


104 


65 


00137F2 


69599DF7 


1FD4D7B76 


34B3701A12 


0 


0 


1 


1 


0 


00 


10 


00 


105 


66 


002eFE5 


S2B33BEF 


1FA9AF6EC 


6966E03424 


0 


1 


1 


0 


0 


00 


00 


10 


106 


67 


004DFCA 


256677DF 


1F535EDD8 


52CDC06848 


0 


0 


1 


1 


0 


01 


00 


00 


107 


68 


009BF94 


4ACCEFBS 


1EA6BDBB0 


259B80D091 


0 


1 


1 


1 ■ 


0 


11 


01 


00 


108 


69 


0137F29 


1599DF7C 


1D4D7B760 


4B3701A123 


0 


1 


1 


0 




10 


11 


01 


109 


70 


026FB53 


2B33BEF9 


1A9AF6EC0 


166E034246 


0 


0 


1 


0 




01 


10 


11 


110 


71 


04DFCA7 


56677DF2 


153 5EDD81 


2CDC0684BD 


0 


0 


0 


1 




01 


01 


10 


111 


72 


09BF94F 


2CCEFBE4 


0A66DBB03 


59B80D091B 


1 


1 


1 


I 




00 


01 


01 


112 


73 


137F29E 


599DF7C9 


14D7B7607 


33701A1236 


0 


1 


0 


0 




11 


00 


01 


113 


74 


06FE53C 


333BEF93 


O9AF6EC0E 


66E034246C 


0 


0 


1 


1 


1 


01 


11 


00 


114 


75 


0DFCA79 


6677DF26 


135ED081D 


4DC06848D8 


1 


0 


0 


1 




10 


01 


11 


lis 


76 


1BF94F2 


4CEFBE4D 


0eBDBB03B 


1B80D091B1 


I 


1 


0 


1 




11 


10 


01 


116 


77 


17F29E5 


19DF7C9A 


0D7B76077 


3701A12363 


0 


1 


1 


0 




00 


11 


10 


117 


78 


0FE53CA 


33BEF934 


1AF6EC0EF 


6E034246C6 


1 


1 


1 


0 




11 


00 


11 


118 


79 


1FCA794 


677DF269 


15EDD81DF 


5C06848D8C 


1 


0 


0 


0 


0 




11 


00 


119 


80 


1F94F29 


4EFBE4D2 


OBDBB03BE 


380D091B19 


1 


1 


1 


0 


0 


01 


01 


11 


120 


81 


1F29E53 


1DF7C9AS 


17B76077D 


701A123633 


1 


1 


0 


0 


1 


11 


01 


01 


121 


62 


1E53CA6 


3BEF934B 


OF6EC0EFB 


6034246C66 


I 


1 


1 


0 


0 


11 


11 


01 


122 


83 


1CA794D 


77DF2696 


1EDD81DF6 


40684eD8CD 


1 


1 


1 


0 


0 


10 


11 


11 


123 


84 


194F29B 


6FBE4D2C 


1DBB03BED 


00D091B19B 


1 


1 


1 


1 


0 


11 


10 


11 


124 


85 


129E536 


SF7C9AS9 


1B76077DA 


01A1236337 


0 


0 


1 


1 


1 


00 


11 


10 


125 


86 


0S3CA6C 


3EF934B3 


16EC0EFB4 


034246C66B 


0 


1 


0 


0 


1 


10 


00 


11 


126 


87 


0A794D9 


7DF26967 


0DDB1DF69 


06e48D8CDD 


1 


1 


1 


1 


0 


01 


10 


00 


127 


88 


14F29B3 


7BE4D2CF 


1BB03BED3 


0D091B19BB 


0 


1 


1 


0 


1 


01 


01 


10 


128 


89 


09ES366 


77C9AS9F 


176077DA6 


1A12363377 


1 


1 


0 


0 


1 


11 


01 


01 


129 


90 


13CA6CD 


6F934B3F 


0EC0EFB4D 


34246C66EF 


0 


1 


1 


0 


1 


10 


11 


01 


130 


91 


0794D9B 


5F26967F 


1D81DF69A 


6846D8CDDF 


0 


0 


1 


0 


1 


01 


10 


11 


131 


92 


0F29B37 


3E4D2CFE 


1B03BED35 


S091B19BBE 


1 


0 


I 


I 


0 


10 


01 


10 


132 


93 


1ES366F 


7C9A59FD 


16077DA6B 


212363377C 


1 


1 


0 


0 


0 


11 


10 


01 


133 


94 


1CA6CDF 


7934B3 FB 


0C0EFB4D6 


4246C66EF9 


1 


0 


1 


0 


1 


00 


11 


10 


134 


95 


194D9BE 


726967F6 


181DF69AO 


048D8CDDF2 


1 


0 


1 


1 


1 


11 


00 


11 


135 


96 


129B3 7D 


64D2CFED 


103BBD3 5B 


091B196BE5 


0 


1 


0 


0 


0 


01 


11 


00 


136 


97 


0S366FA 


49A59FDA 


0077DA6B7 


12363377CA 


0 


1 


0 


0 


0 


10 


01 


11 


137 


98 


0A6CDF5 


134B3FB4 


O0EFB4D6E 


246C66EF95 


I 


0 


0 


0 


1 


00 


10 


01 


138 


99 


14D9BEA 


26967F69 


01DF69ADD 


48D8CDDF2B 


0 


1 


0 


1 


0 


00 


00 


10 


139 


100 


09B3 7D4 


4D2CFED2 


03BED35BB 


11B19BBE56 


1 


0 


0 


1 


0 


01 


00 


00 


140 


101 


1366FA8 


1A59FDAS 


077DA6B77 


2363377CAC 


0 


0 


0 


0 


1 


01 


01 


00 


141 


102 


06CDF51 


34B3FB4A 


0EFB406EF 


46C66EF959 


0 


1 


1 


1 


0 


00 


01 


01 


142 


103 


0D9BEA2 


6967F695 


1DF69ADDF 


0O8CDDF2B2 


I 


0 


1 


1 


I 


10 


00 


01 


143 


104 


1B37D45 


52CFED2A 


1BHD35BBF 


1B19BBE564 


1 


1 


1 


0 


1 


00 


10 


00 


144 


105 


166FA8A 


2 59FDAS4 


17DA6B77E 


363377CAC8 


0 


1 


0 


0 


1 


01 


00 


10 


145 


106 


0CDF515 


4B3FB4A9 


0FB4D6EFC 


6C66EF9591 


1 


0 


1 


0 


1 


00 


01 


00 
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146 


107 


19BBA2B 


167F6952 


1F69ADDF8 


58CDDF2B22 


1 


0 


\ 


1 


X 


10 


00 


01 


147 


108 


137D457 


2CFED2A5 


1ED3 5BBF1 


3 19BBE5645 


0 


1 


\ 


1 


1 


00 


10 


00 


148 


109 


06FA8AF 


59FDA54A 


1DA6B77E2 


63377CAC8B 


0 


1 


1 


0 


0 


00 


00 


10 


149 


110 


0DF515F 


33FB4A95 


1B4D6EFC4 


466EF95916 


1 


1 


I 


0 


1 


01 


00 


00 


150 


111 


1BEA26F 


67F6952A 


169ADDF88 


0CDDF2B22C 


1 


1 


0 


1 


0 


n 


01 


00 


151 


112 


17D457F 


4FED2A55 


0D35BBF10 


19BBE56459 


0 


1 


1 


1 


0 


11 


11 


01 


152 


113 


0FA8AFE 


1FDA54AB 


1A6B77E20 


3377CAC8B3 


1 


1 


1 


0 


0 


10 


11 


11 


153 


114 


1F515FD 


3FB4A957 


14D6EFC40 


66EF959166 


1 


1 


0 


1 


1 


10 


10 


11 


154 


115 


1EA2BFA 


7F6952AF 


0 9ADDF880 


4DDF2B22CC 


1 


0 


1 


1 


1 


01 


10 


10 


155 


116 


1D457F4 


7ED2A55F 


135BBF100 


1BBE564598 


1 


1 


0 


1 


0 


10 


01 


10 


156 


117 


1A8AFE8 


7DA54ABF 


06B77E200 


377CAC8B31 


1 


1 


0 


0 


0 


11 


10 


01 


157 


118 


1515FD0 


7B4A957F 


0D6EFC401 


6EF9591663 


0 


0 


1 


1 


1 


00 


11 


10 


158 


119 


0A2BFA1 


76 952AFE 


1ADDF8803 


5DF2B22CC7 


1 


1 


1 


1 


0 


•00 


00 


11 


159 


120 


1457F42 


6D2A55FD 


15BBF1007 


3BE564598E 


0 


0 


0 


1 


I 


00 


00 


00 


160 


121 


08AFE84 


5A54ABFB 


0B77E200F 


77CAC8B31C 


1 


0 


1 


1 


X 


01 


00 


00 


161 


122 


115FD09 


34A957F7 


16EFC401F 


6F95916639 


0 


1 


0 


1 


1 


00 


01 


00 


162 


123 


02BFA12 


6952AFEF 


0DDF8803E 


5F2B22CC73 


0 


0 


1 


0 


1 


11 


00 


01 


163 


124 


057F424 


52A55FDF 


1BBF1007D 


3E564598E7 


0 


1 


1 


0 


1 


01 


11 


00 


164 


125 


0AFE848 


2 54ABFBF 


177E200FA 


7CAC8B31CF 


1 


Q 


0 


1 


1 


10 


01 


11 


165 


126 


15FD090 


4A957F7E 


0EFC401F5 


79591663 9E 


0 


1 


1 


0 


0 


11 


10 


01 


166 


127 


0BFA121 


152AFEFD 


1DF8803EA 


72B22CC73C 


1 


0 


1 


1 


0 


01 


11 


10 


167 


128 


17F4243 


2A55FDFA 


1BF1007D4 


656459SE78 


0 


0 


1 


0 


0 


10 


01 


11 


16B 


129 


0FE8486 


S4ABFBF4 


17E2 00FA8 


4AC8B31CF0 


1 


1 


0 


1 


1 


11 


10 


01 


169 


130 


1FD090C 


2957F7E8 


0FC401F51 


15916639E1 


1 


0 


1 


1 


0 


01 


11 


10 


170 


131 


1FA1219 


52AFEFD1 


1F8803EA3 


2B22CC73C2 


1 


1 


1 


0 


0 


01 


01 


11 


171 


132 


1F42432 


2 55FDFA2 


1F1007D47 


564598E785 


1 


0 


1 


0 


1 


11 


01 


01 


172 


133 


1E84865 


4ABFBF44 


lE200FAaF 


2C8B31CF0B 


1 


1 


1 


1 


1 


11 


11 


01 


173 


134 


1D0 90CB 


157F7E88 


1C401F51E 


5916639E17 


1 


0 


1 


0 


I 


11 


11 


1 1 


174 


135 


1A12196 


2AFEFD11 


18803EA3C 


322CC73C2E 


1 


1 


1 


0 


0 


10 


11 


11 


175 


136 


142432C 


55FDFA23 


11007D479 


64598E785C 


0 


1 


0 


0 


1 


01 


10 


11 


176 


137 


0848659 


2BFBF446 


0200FA8F2 


48B31CF0B9 


1 


1 


0 


1 


0 


10 


01 


10 


177 


138 


1090CB2 


57F7E88C 


0401F51E4 


116639E173 


0 


1 


0 


0 


1 


00 


10 


01 


178 


139 


0121964 


2FEFD118 


0803EA3C8 


22CC73C2E6 


0 


1 


1 


1 


1 


00 


00 


10 


179 


140 


02432C9 


5FDFA2 3 0 


1007D4791 


4S98E78SCD 


0 


1 


0 


1 


0 


01 


00 


00 


180 


141 


0486593 


3FBF4461 


O00FA8F23 


0B31CF0B9B 


0 


1 


0 


0 


0 


00 


01 


00 


181 


142 


090CB26 


7F7E88C3 


001F51E47 


16639E1736 


1 


0 


0 


0 


1 


11 


00 


01 


182 


143 


121964D 


7EFD1187 


003EA3C8F 


, 2CC73C2E6C 


0 


X 


0 


1 


1 


01 


11 


00 


163 


144 


0432C9B 


7DFA2 3 0E 


007D4791E 


598E785CD8 


0 


1 


0 


1 


1 


10 


01 


11 


184 


145 


0865936 


7BF4461C 


00FA8F23C 


331CF0B9B0 


1 


1 


0 


0 


0 


11 


10 


01 


185 


146 


10CB26D 


77E88C38 


01F51E479 


6639E17361 


0 


1 


0 


0 


0 


00 


11 


10 


186 


147 


01964DA 


6FDH870 


03EA3C8F2 


4C73C2E6C2 


0 


1 


0 


0 


1 


10 


00 


11 


187 


148 


032C9B4 


5FA230E1 


07D4791E4 


18E7S5CD84 


0 


1 


0 


X 


0 


00 


10 


00 


188 


149 


0659368 


3F4461C2 


0FA8F23C9 


31CFOB9B09 


0 


0 


1 


1 


0 


00 


00 


10 


189 


150 


0CB26D0 


7E88C384 


1F51E4793 


639E173612 


1 


1 


1 


1 


0 


10 


00 


00 


190 


151 


1964DA0 


7Dia8709 


1EA3C8F27 


473C2E6C24 


1 


0 


1 


0 


0 


00 


10 


00 


191 


152 


12C9B41 


7A230E12 


1D4791E4E 


0B785CD848 


0 


0 


1 


0 


1 


01 


00 


10 


192 


153 


0593683 


74461C24 


1A8F23C9C 


1CF0B9B091 


0 


0 


1 


1 


1 


00 


01 


00 


193 


154 


0B2 6D06 


688C3848 


151E47938 


39E1736123 


1 


1 


0 


1 


1 


10 


00 


01 


194 


155 


164DA0D 


51187091 


0A3C8F271 


73C2E6C247 


Q 


Q 














195 


156 


0C9B41A 


2230E123 


14791E4E3 


67B5CD848F 


1 


0 


0 


1 


0 


00 


00 


10 


196 


157 


1936835 


4461C247 


08F23C9C6 


4F0B9B091E 


1 


0 


1 


0 


0 


01 


00 


00 


197 


158 


126D06A 


08C3848E 


11E47938D 


1E1736123C 


0 


1 


0 


0 


0 


00 


01 


00 


198 


159 


04DA0D5 


1187091C 


03C8F271B 


3C2E6C2478 


0 


1 


0 


0 


1 


11 


00 


01 


199 


160 


09B41AA 


230E1238 


0791E4E37 


785CD848F1 


1 


0 


0 


0 


0 


01 


11 


00 


200 


161 


1368354 


461C2470 


0F23C9C6F 


70B9B091E3 


0 


0 


1 


1 


1 


10 


01 


11 


201 


162 


06D06A9 


0C3848E1 


1E47938DF 


61736123C6 


0 


0 


1 


0 


1 


00 


10 


01 


202 


163 


0DA0D52 


187091C3 


1C8F271BE 


42E6C247eD 


1 


0 


1 


1 


1 


00 


00 


10 
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203 


164 


1B4 1AA4 


30E12 J 87 


191E4E37C 


05CD84aFlA 


1 


1 


1 


1 


0 


10 


00 


00 


204 


16 5 


1683S49 


61C2470F 


1 23C9C6F9 


0B9B091E34 


0 


1 


0 


1 


0 


00 


10 


00 






UL)UoA92 


43848E IE 


04793 8DF3 


1736123C68 


1 


1 


0 


0 


0 


00 


00 


10 


206 


16 7 


1A0D524 


0709 1C3C 


08F271BE7 


2E6C2478D1 


1 


0 


1 


0 


0 


01 


00 


00 


207 


16 8 


14 1AA49 


0E123879 


1 1E4E3 7CF 


5CD84 8F1A2 


0 


0 


0 


1 


0 


00 


01 


00 


208 


16 9 


083 5492 


IC24 70F3 


03C9C6F9F 


39B09 1E345 


1 


0 


0 


1 


0 


10 


00 


01 






106A92 5 


^ OA QOl Of 


0 79 J BDF 3 F 


736123C68B 


0 


0 


0 


0 


0 


11 


10 


00 


210 


17 I 


□UU524A 


709 1C3 CD 


0 F2 7 1BE7E 


66C2478D16 


0 


I 


1 


1 


0 


01 


11 


10 


211 


172 


01AA495 


6123879B 


1E4E37CFD 


4D848F1A2D 


0 


0 


1 


1 


1 


10 


01 


11 






03 5492 A 


42470F36 


1C9C6F9FB 


1B091E34SB 


0 


0 


1 


0 


1 


00 


10 


01 






06A92S5 


04 8E1E6C 


1 93 60F3F6 


36 123C68B7 


0 


1 


1 


0 


0 


00 


00 


10 


214 


17 5 


0DS24AB 


091C3CD8 


1271BE7EC 


6C2478D16B 


1 


0 


0 


0 


1 


00 


00 


00 


215 


17 6 


1AA4957 


123879B1 


04E37CFD8 


5848F1A2DD 


1 


0 


0 


0 


1 


00 


00 


00 


216 


17 7 


15492AF 


2470F3 63 


09C6F9FB0 


3091E345BA 


0 


0 


1 


I 


0 


01 


00 


00 


217 


17 8 


0A9255E 


48E1E6C7 


138DF3F61 


6123C68B75 


1 


1 


0 


0 


1 


00 


01 


00 


218 


179 


1524ABD 


11C3CD8F 


071BE7EC3 


42478D16EB 


0 


1 


0 


0 


1 


11 


00 


01 


219 


18 0 


0A4957B 


23 879B1F 


0E37CFD87 


048F1A2DD6 


1 


1 


1 


1 


1 


00 


11 


00 


22 0 


18 1 


1492AF6 


470F363F 


1C6F9FB0E 


091E345BAD 


0 


0 


1 


0 


1 


10 


00 


11 


22 1 


182 


09255EC 


0E1E6C7F 


1 BDF3F61D 


123C68B7SB 


1 


0 


1 


0 


0 


00 


10 


00 


222 


133 


124ABD9 


1C3CD8FF 


1 1BE7EC3A 


2478D16B66 


0 


0 


0 


0 


0 


01 


00 


10 


22 3 


18 4 


04957B3 


3879B1FE 


037CFD874 


48FIA2DD6D 


0 


0 


0 


1 


0 


00 


01 


00 


224 


185 


092AF66 


70F363FD 


06F9FB0E9 


11E345BADB 


1 


1 


0 


I 


1 


10 


00 


01 


225 


186 


1255ECO 


61E6C7FA 


0DF3F61D3 


23C68B75B7 


0 


1 


1 


1 


1 


00 


10 


00 


22 6 


18 7 


04AB09B 


43CD8FF5 


1BE7EC3A7 


478D16EB6B 


0 


1 


1 


1 


1 


00 


00 


10 


22 7 


18 8 


0957B37 


079B1FBA 


17CFD874E 


0F1A2DD6DD 


1 


1 


0 


0 


0 


01 


00 


00 




18 9 


12AF66F 


0F363FD4 


0F9FB0E9C 


1E345BADBB 


0 


0 


1 


0 


0 


00 


01 


00 


22 9 


19 0 


055ECDB 


1E6C7FA9 


1F3F61D39 


3C68B75B76 


0 


0 


1 


0 


1 


11 


00 


01 


230 


191 


0ABD9BC 


3CD8FF53 


1E7EC3A73 


78D16EB6EC 


1 


1 


I 


1 


1 


00 


11 


00 


231 


192 


157B379 


79B1FEA7 


1CFD874E6 


71A2DD6DD9 


0 • 


1 


1 


1 


1 


11 


00 


11 


232 


X93 


0AF66F3 


7363FD4E 


19FB0E9CD 


634 5BADBB2 


1 


0 


1 


0 


1 


01 


11 


00 


233 


194 


15ECDE6 


66C7FA9D 


13F61D39A 


468B75B765 


0 


1 


0 


1 


1 


10 


01 


11 


234 


195 


0BD9BCC 


4D8FF53A 


07EC3A735 


0D16EB6ECA 


1 


1 


0 


0 


0 


11 


10 


01 


235 


196 


17B3799 


1B1FEA75 


0FDe74E6A 


1A2DD6DD94 


0 


0 


1 


0 


0 


00 


11 


10 


236 


197 


0F66F33 


363FD4EA 


1FB0E9CD5 


345BADBB2 8 


1 


0 


1 


0 


0 


11 


00 


11 


237 


198 


IECDE67 


6C7FA9D5 


1F61D39AA 


68B75B7650 


1 


0 


1 


1 


0 


00 


11 


00 


238 


199 


1D9BCCF 


58FF53AB 


1EC3A7354 


516EB6ECA0 


1 


1 


1 


0 


1 


11 


00 


11 


239 


200 


1B3799E 


31FEA756 


1D874B6A8 


22DD6DD940 


1 


I 


1 


1 


1 


00 


11 


00 



Z[0] 

zCU 

ZC2J 
Z[3] 
2[4] 
Z[5] 
Z[6] 
Z[7] 
Zt8] 
Zt9j 

ztioi 
ZCU] 

2[12] 
Ztl31 
Z[14l 
Z[1S] 



- 3F 
« Bl 
o 67 

• D2 

- 2F 

- A6 

- IF 

- B9 
. E6 

• 84 

- 43 

- 07 

- D6 

• IE 
» E7 

- C3 
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Bluetooth. 



Reload this pattern into the LFSRs 

Hold content of Suntimation Combiner regs and calculate new C[t+1] and Z values 

LFSRl <= 0E62F3F 

LFSR2 <= 6C84A6B1 

LFSR3 <= 11E431F67 

LFSR4 <= 61E707B9D2 

C[C+ll <= 00 



Generating 12 5 key symbols (encryption/decryption sequence) 



240 


1 


0E62F3F 


6C84A6B1 


11E431F67 


61E707B9D2 


1 


1 


0 


1 


0 


00 


11 


00 


241 


2 


1CC5E7F 


59094D63 


03C863ECE 


43CE0F73A5 


1 


0 


0 . 


1 


0 


11 


00 


11 


242 


3 


198BCFF 


32129AC6 


0790C7D9D 


079C1EE74A 


1 


0 


0 


1 


1 


01 


11 


00 


243 


4 


13179FE 


6425358C 


0F218FB3A 


0F383DCE94 


0 


0 


1 


0 


0 


10 


01 


11 


244 


5 


062F3FD 


484A6B19 


1E431F675 


1E707B9D28 


0 


0 


1 


0 


1 


00 


10 


01 


245 


6 


0C5E7FB 


1094D632 


1C863ECEB 


3CE0F73A50 


1 


1 


1 


1 


0 


11 


00 


10 


246 


7 


18BCFF7 


212 9AC64 


190C7D9D7 


79C1EE74A1 


1 


0 


1 


1 


0 


00 


11 


00 


247 


8 


117 9FEE 


425358C8 


1218FB3AE 


7383DCE942 


0 


0 


0 


1 


1 


10 


00 


11 


248 


9 


02 F 3 FDD 


04A6B190 


0431F675D 


6707B9D285 


0 


1 


0 


0 


I 


11 


10 


00 


249 


10 


05E7FBB 


094D6320 


0863ECEBB 


4E0F73A50B 


0 


0 


1 


0 


0 


00 


11 


10 


250 


11 


0BCFF77 


129AC640 


10C7D9D77 


1C1EE74A16 


1 


1 


0 


0 


0 


11 


00 


11 


251 


12 


179FEEE 


25358C80 


018FB3AEE 


3 83DCE942C 


0 


0 


0 


0 


I 


10 


11 


00 


252 


" 13 


0F3FDDC 


4A6B1900 


031F675DD 


707B9D2859 


1 


0 


0 


0 


1 


01 


10 


11 


253 


14 


1E7FBB8 


14063 200 


063ECEBBA 


60F73AS0B3 


1 


1 


0 


1 


0 


10 


01 


10 


254 


15 


1CFF771 


29AC6401 


0C7D9D774 


41EE74A167 


1 


1 


1 


1 


0 


10 


10 


01 


255 


16 


19FEEE2 


5358C803 


18FB3AEE9 


03DCE942CE 


1 


0 


1 


1 


1 


01 


10 


10 


256 


17 


13FDDC4 


26B19007 


11F675DD2 


07B9D2859C 


0 


1 


0 


1 


1 


01 


01 


10 


257 


18 


07FBB68 


4De3200E 


03BCEBBA4 


0F73A50B38 


0 


0 


0 


0 


1 


10 


01 


01 


258 


19 


0FF7711 


1AC6401D 


07D9D7748 


1EE74AX670 


1 


1 


0 


1 


1 


11 


10 


.01 


259 


20 


1FEEE23 


358C803B 


0FB3AEB91 


3DCE942CE1 


1 


1 


1 


1 


1 


01 


11 


10 


260 


21 


1FDDC47 


6B190076 


1F67 5DD2 3 


7B9D2859C2 


1 


0 


1 


1 


0 


01 


01 


11 


261 


22 


1FBB88F 


563200ED 


1ECEBBA47 


773A50B385 


1 


0 


1 


0 


1 


11 


01 


01 


262 


23 


1F7711E 


2Ce401DB 


1D9D7748F 


6E74A1670A 


1 


0 


1 


0 


1 


10 


11 


01 


263 


24 


1EEE2 3D 


58C803B6 


1B3AEE91B 


5CE942CE15 


1 


1 


1 


1 


0 


11 


10 


11 


264 


25 


IDDC47A 


3190076C 


1675DD23D 


39D2859C2B 


1 


1 


0 


1 


0 


01 


11 


10 


265 


26 


1BB88F4 


63200ED9 


0CEBBA47A 


73A50B3856 


1 


0 


1 


l' 


0 


01 


01 


11 


266 


27 


17711E8 


46401DB2 


19D7748F5 


674A1670AD 


0 


0 


1 


0 


0 


11 


01 


01 


267 


28 


0EE23D0 


0C803B64 


13AEE91EA 


4E942CB15B 


1 


1 


0 


1 


0 


11 


11 


01 


268 


29 


1DC47A0 


190076C8 


075DD23D4 


1D2859C2B7 


1 


0 


0 


0 


0 


11 


11 


11 


269 


30 


1B88F41 


3200ED90 


0EBBA47A9 


3A50B3856E 


1 


0 


1 


0 




11 


11 


11 


270 


31 


1711E83 


6401DB20 


1D7748F53 


74A1S70ADC 


0 


0 


1 


1 




11 


11 


11 


271 


32 


0E2 3D07 


4803B641 


1ABE91EA7 


e942CE15B8 


1 


0 


1 


0 




11 


11 


11 


272 


33 


1C4 7A0P 


10076C82 


15DD23D4F 


52859C2B71 


1 


0 


0 


1 




IX 


11 


11 


273 


34 


188F41E 


200ED905 


0BBA47A9E 


250B3856E3 


1 


0 


1 


0 




11 


11 


11 


274 


35 


111E83C 


401DB20A 


17748F53D 


4A1670ADC7 


0 


0 


0 


0 




00 


11 


11 


275 


36 


023D078 


003B6414 


0EE91EA7A 


142CE15B8E 


0 


0 


1 


0 




10 


00 


11 


276 


37 


047A0F0 


0076C828 


1DD23D4F5 


2859C2B71C 


0 


0 


1 


0 




11 


10 


00 


277 


38 


08F41E1 


O0ED905O 


1BA4 7A9EA 


50B3856E39 


1 


1 


1 


1 




01 


11 


10 


278 


39 


11E83C2 


01DB2 0A0 


1748F53D5 


21670ADC72 


0 


1 


0 


0 




10 


01 


11 


279 


40 


03D0785 


03B64141 


0E91EA7AA 


42CE15BSE4 


0 


1 


1 


1 




11 


10 


01 


280 


41 


07A0F0A 


076C8283 


1D23D4F54 


059C2B71C8 


0 


0 


1 


1 




00 


11 


10 


281 


42 


0F41E14 


0ED90507 


1A47A9EA9 


0B3856E390 


1 


1 


1 


0 




11 


00 


11 


282 


43 


1E83C29 


1DB20A0F 


148F53D52 


1670ADC720 


1 


1 


0 


0 




01 


11 


00 


283 


44 


1D07853 


3B64141E 


091EA7AA5 


2CE15BSE40 


1 


0 


I 


1 


0 


01 


01 


11 
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284 


45 


1A0F0A6 


76C8283C 


123D4F54B 


59C2B71C81 


1 


1 


0 


1 


0 


00 


01 


01 


285 


46 


141E14C 


6D905079 


047A9EA97 


33856E3902 


0 


1 


0 


1 


0 


10 


00 


01 


286 


47 


083C299 


5B20A0F2 


08F53D52F 


670ADC7204 


1 


0 


1 


0 


0 


00 


10 


00 


287 


48 


1078533 


364141E4 


1 1EA7AA5E 


4E15B8E408 


0 


0 


0 


0 


0 


01 


00 


10 


288 


49 


00F0A67 


6C8283C6 


03D4FS4BC 


IC2B71C811 


0 


1 


0 


0 


0 


00 


01 


00 


289 


50 


01E14CE 


59050791 


07A9EA978 


38S6E39022 


0 


0 


0 


0 


0 


11 


00 


01 


290 


51 


03C299C 


320A0F23 


0F53D52F1 


70ADC72045 


0 


0 


1 


1 


I 


01 


11 


00 


291 


52 


078S339 


64141E47 


1EA7AA5E2 


615B8E408A 


0 


0 


1 


0 


0 


10 


01 


11 


292 


53 


0F0A673 


48283C8E 


1D4F54BC4 


42B71C8H5 


1 


0 


1 


1 


1 


11 


10 


01 


293 


54 


1E14CE6 


1050791C 


lA9EA978e 


056E39022B 


1 


0 


1 


0 


1 


00 


11 


10 


294 


55 


1C299CD 


20A0F2 3 9 


153DS2F10 


0ADC72O456 


1 


1 


0 


1 


1 


11 


00 


11 


295 


56 


1B5339B 


4141E472 


OA7AA5E2 0 


15BBE408AC 


1 


0 


1 


1 


0 


00 


11 


00 


296 


57 


10A6736 


0283C8B4 


14F54BC41 


2B71C81158 


0 


1 


0 


0 


1 


10 


00 


11 


297 


58 


014CE6C 


OS0791C9 


09EA97882 


S6E39022B0 


0 


0 


1 


1 


0 


00 


10 


00 


298 


59 


0299CD9 


0A0F2393 


13D52F104 


2DC7204561 


0 


0 


0 


1 


1 


01 


00 


10 


299 


60 


05339B3 


141E4726 


0 7AA5E2 08 


5B8E408AC3 


0 


0 


0 


1 


0 


00 


01 


00 


300 


61 


0A67366 


283C8E4C 


0F54BC411 


371C811587 


1 


0 


1 


0 


0 


10 


00 


01 


301 


62 


14CE6CC 


50791C98 


IEA978822 


6E39022B0F 


0 


0 


1 


0 


1 


11 


10 


00 


302 


63 


099CD99 


20F23930 


1D52F1045 


5C7204561E 


1 


1 


1 


0 


0 


01 


11 


10 


303 


64 


1339B33 


41E47260 


1AA5E208B 


3 8E408AC3D 


0 


1 


1 


1 


0 


01 


01 


11 


304 


65 


0673666 


03C8E4C0 


154BC4117 


71C811587A 


0 


1 


0 


1 


1 


11 


01 


01 


305 


66 


0CE6CCC 


0791C980 


0A978e22E 


639022B0F5 


1 


1 


I 


1 


1 


11 


11 


01 


306 


67 


19CD999 


0F239301 


152F1045C 


47204S61EB 


1 


0 


0 


0 


0 


11 


11 


11 


307 


68 


139B332 


1E472603 


0A5E208B9 


0B408AC3D6 


0 


0 


I 


0 


0 


11 


11 


11 


308 


69 


0736664 


3C8E4C06 


14BC41172 


1C811S87AD 


0 


1 


0 


1 


1 


11 


11 


11 


309 


70 


0E6CCC8 


791C980C 


0978822E5 


39022B0F5A 


1 


0 


1 


0 


1 


11 


11 


11 


310 


71 


1CD9990 


72393019 


12F1045CB 


7204S61EB4 


1 


0 


0 


0 


0 


11 


11 


11 


311 


72 


19B3320 


64726033 


05E208B97 


6408AC3D69 


1 


0 


0 


0 


0 


11 


11 


11 


312 


73 


1366640 


48E4C067 


0BC41172F 


4811587A03 


0 


1 


1 


0 


1 


11 


11 


11 


313 


74 


06CCC81 


HC980CF 


178822E5B 


1022B0F5Ae 


0 


1 


0 


0 


0 


11 


11 


11 


314 


75 


0D99903 


2393019E 


0F1045CBC 


204561EB4C 


1 


1 


1 


0 


0 


10 


11 


11 


315 


76 


1B33206 


4726033D 


1E208B979 


408AC3D699 


1 


0 


1 


1 


1 


10 


10 


11 


316 


77 


166640D 


0B4C067B 


1C41172F2 


011587AD33 


0 


0 


I 


0 


1 


10 


10 


10 


317 


78 


0CCC81B 


1C980CF6 


18822E5BS 


022B0F5A66 


1 


1 


1 


0 


1 


01 


10 


10 


318 


79 


1999036 


393019EC 


11045CBCA 


04561EB4CD 


1 


0 


0 


0 


0 


01 


01 


10 


319 


80 


133206C 


726033D9 


0208B9794 


08AC3O699B 


0 


0 


0 


1 


0 


11 


01 


01 


320 


81 


06640D9 


64C067B3 


041172F29 


11587AD3 37 


0 


1 


0 


0 


0 


10 


11 


01 


321 


S2 


0CC81B3 


4980CFe6 


0822E5E53 


22B0F5A66F 


I 


I 


1 


1 


0 


11 


10 


11 


322 


83 


1990366 


13019ECC 


1045CBCA6 


4561EB4CDF 


1 


0 


0 


0 


0 


00 


11 


10 


323 


84 


13206CC 


26033098 


008B9794D 


0AC3D699BB 


0 


0 


0 


1 


I 


10 


00 


11 


324 


85 


0640D98 


4C067B31 


01172F29B 


1587AD337C 


0 


0 


0 


1 


1 


11 


10 


00 


325 


86 


OC81830 


180CF662 


022E5E537 


2B0F5A66F9 


1 


0 


0 


0 


0 


00 


11 


10 


326 


87 


1903660 


3019ECC5 


045CBCA6F 


561EB4COF3 


1 


0 


0 


0 


1 


10 


00 


11 


327 


88 


1206CC1 


6033D9 8A 


OeB9794DE 


2C3D699BE6 


0 


0 


1 


0 


1 


11 


10 


00 


328 


89 


0400983 


4067B31S 


1172F29BD 


587A0337CC 


0 


0 


0 


0 


1 


11 


11 


10 


329 


90 


081B306 


00CF662A 


02E5E537A 


30F5A66F98 


1 


I 


0 


1 


0 


10 


11 


11 


330 


91 


103660C 


019ECC5S 


0 5CBCA6F4 


61EB4CDF31 


0 


1 


0 


I 


0 


10 


10 


11 


331 


92 


006CC19 


033D9BAB 


0B9794DE8 


43D699BE62 


0 


0 


I 


1 


0 


01 


10 


10 


332 


93 


00D9833 


06783156 


172F29BD0 


07AD3 3 7CC5 


0 


0 


0 


1 


0 


01 


01 


10 


333 


94 


01B3066 


0CF662AC 


0E5E537A0 


0F5A66F98B 


0 


1 


1 


0 . 


1 


11 


01 


01 


334 


95 


0366000 


19ECCS59 


1CBCA6F41 


1EB4COF317 


0 


1 


1 


1 


0 


11 


11 


01 


335 


96 


06CC19B 


33D98AB2 


19794DE83 


3D699BE62F 


0 


1 


I 


0 


I 


11 


11 


11 


336 


97 


0D98336 


67B3156S 


12F29BD06 


7AD337CC5F 


1 


1 


0 


1 


0 


10 


11 


11 


337 


98 


1B3066O 


4F662ACA 


05E537AOC 


75A66F98BF 


1 


0 


0 


1 


0 


10 


10 


11 


338 


99 


1660CDB 


1ECC5594 


0BCA6F418 


6B4CDF317E 


0 


1 


1 


0 


0 


01 


10 


10 


339 


100 


0CC19B7 


3D9BAB29 


1794DE831 


5699BE62FC 


1 


1 


0 


1 


0 


10 


01 


10 


340 


101 


198336F 


7B3156S3 


0F29BO062 


2D337CC5F9 


1 


0 


1 


0 


0 


11 


10 


01 
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Bluetooth. 



341 


102 




r Q D Z ill. A / 






















342 


103 


060CDBC 


6CC5594F 


1 n £ TTA 1 an 
iLAo r 4 J. oo 


















11 


343 


104 


OCl 9B78 




1 QADPA 7 1 7 
J. ytusio^ L t 


ft Q Q m? 5 TT P Q 


















344 


105 


18336F1 


3315653F 


1 79Brtn fi5P 




]^ 




Q 


Q 










345 


106 


1066DE2 


662ACA7E 




Z O D r 7 Q Dr Z D 


















346 


107 


00CDBC5 


4C5594FD 


0A6F418B9 


4CDF3 X 7E4B 


Q 


Q 








00 






347 


108 


019B78B 


18AB2 9FA 


14DE83 172 


1 9BE62FC96 


Q 


\ 


0 


1^ 


Q 


]^ 






34B 


109 


033 6F16 


3 15653F4 


09BD062B5 


3 3 7CC5F92C 


0 


Q 


\ 


Q 


Q 


01 






349 


110 


066DE2D 


62ACA7E8 


137A0C5CA 


66F96BF258 


0 




0 






10 


01 




350 


111 


0CDBC5B 


45594FD1 


06F4 16B9S 


4DF3 17E4B1 




0 


0 




Q 


J^l 


10 


01 


351 


112 


19B78B6 


0AB29FA2 


0DE83172B 


1BE62FC9 62 




1 




1 




01 




10 


352 


113 


136F16C 


15653F45 


1BD062E57 


37CC5F92C5 


0 


0 


1 


1 




10 


01 


\ \ 


353 


114 


06DE2D9 


2ACA7E8B 


17A0C5CAE 


6F98BF25 8B 


0 


\ 


0 


I 


Q 


J^l 


10 




354 


115 


0DBC5B2 


5594FD16 


0F41 8B95D 


5F3 17E4B16 


1 


1 




0 


0 


01 


\ \ 


10 


355 


116 


1B78B64 


2B29FA2C 


1E83 172BS 


3E62FC962C 


1 


0 


1 


Q 




10 


0 1 


\ 1 




117 


16F16C8 


Sod J c 458 


1D062E577 


7CC5F92C58 


0 


0 


1 


1 


0 


11 


10 


01 


357 


118 


0DE2D91 


2CA7E8B0 


1A0C5CAEF 


798BF258B1 


1 


1 


1 


1 


1 


01 


11 


10 


358 


119 


1BC5B23 


594FD161 


1418B95DF 


7317E4B163 


1 


0 


0 


0 


0 


10 


01 


11 


359 


120 


179B647 


32 9FA2C2 


083172BBF 


662FC962C7 


0 


1 


1 


0 


0 


11 


10 


01 


360 


121 


0F16C8E 


653F4584 


1062E577F 


4C5F92C58E 


1 


0 


0 


0 


0 


00 


11 


10 


361 


122 


1E2D91C 


4A7E8B09 


O0C5CAEFE 


18BF258B1C 


1 


0 


0 


1 


0 


11 


00 


11 


362 


123 


1C5B238 


14FD1613 


018B95DFC 


317E4B1639 


1 


1 


0 


0 


1 


01 


11 


00 


363 


124 


18B6471 


2 9FA2C27 


03172BBF9 


62FC962C72 


1 


1 


0 


1 


0 


01 


01 


11 


364 


125 


116C8E2 


53F4584B 


062E577F3 


45F92C58E4 


0 


1 


0 


1 


1 


11 


01 


01 
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Appendix IV • Sample Data BlUBtOOth 

2 FREQUENCY HOPPING SAMPLE DATA- 
MANDATORY SCHEME 



These sets of sample data show the mandatory frequency hopping scheme for 
three different combinations of addresses and initial clock values. The first part 
is for the 79-hop system, the second is for the 23-hop system. 



2.1 THE 79.HOP SYSTEM SAMPLE DATA 
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Appendix IV - Sample Data 

2.1.1 Fors^set 



79 HOP SYSTEM 



Hop sequence {k} for PAGE SCAN/ INQUIRY SCAN: 



CLKN start: 
ULAP: 



0x0000000 
0x00000000 



#ticks: 


0000 


1000 


2000 


3000 


4000 


5000 


6000 


7000 


0x0000000 


0 


2 


4 


6 


8 


10 


12 


14 


0x0008000 


16 


18 


20 


22 


24 


26 


28 


30 


0x0010000 


32 


34 


36 


38 


40 


42 


44 


46 


0x0018000 


48 


50 


52 


54 


56 


58 


60 


62 


0x0020000 


0 


2 


4 


6 


8 


10 


12 


14 


0x0028000 


16 


18 


20 


22 


24 


26 


28 


30 


0x0030000 


32 


34 


36 


38 


40 


42 


44 


46 


0x0038000 


48 


50 


52 


54 


56 


58 


60 


62 



Hop sequence {k} for PAGE STATE/INQUIRY STATE: 



CLKE Start: 
ULAP: 



0x0000000 
0x00000000 



#ticks: 


00 


01 


02 


03 


04 


05 


06 


07 


08 


09 


Oa 


Ob 


Oc 


Od 


Oe 


Of 


0x0000000 


: 48 


50 


09 


13 


52 


54 


41 


45 


56 


58 


11 


15 


60 


62 


43 


47 


0x0000010 


: 00 


02 


64 


68 


04 


06 


17 


21 


08 


10 


66 


70 


12 


14 


19 


23 


0x0000020 


: 48 


50 


09 


13 


52 


54 


41 


45 


56 


58 


11 


15 


60 


62 


43 


47 


0x0000030 


00 


02 


64 


68 


04 


06 


17 


21 


08 


10 


66 


70 


12 


14 


19 


23 


0x0001000 


48 


18 


09 


05 


20 


22 


33 


37 


24 


26 


03 


07 


28 


30 


35 


39 


0x0001010 


32 


34 


72 


76 


36 


38 


25 


29 


40 


42 


74 


78 


44 


46 


27 


31 


0x0001020 


4 8 


18 


09 


05 


20 


22 


33 


37 


24 


26 


03 


07 


28 


30 


35 


39 


0x0001030 


32 


34 


72 


76 


36 


38 


25 


29 


40 


42 


74 


78 


44 


46 


27 


31 


0x0002000 


16 


18 


01 


05 


52 


54 


41 


45 


56 


58 


11 


15 


60 


62 


43 


47 


0x0002010 


00 


02 


64 


68 


04 


06 


17 


21 


08 


10 


66 


70 


12 


14 


19 


23 


0x0002020 


16 


18 


01 


05 


52 


54 


41 


45 


56 


58 


11 


15 


60 


62 


43 


47 


0x0002030 


00 


02 


64 


68 


04 


06 


17 


21 


08 


10 


66 


70 


12 


14 


19 


23 


0x0003000 


48 


50 


09 


13 


52 


22 


41 


37 


24 


26 


03 


07 


28 


30 


35 


39 


0x0003010 


32 


34 


72 


76 


36 


38 


25 


29 


40 


42 


74 


78 


44 


46 


27 


31 


0x0003020 


48 


50 


09 


13 


52 


22 


41 


37 


24 


26 


03 


07 


28 


30 


35 


39 


0x0003030. 


32 


34 


72 


76 


36 


38 


25 


29 


40 


42 


74 


78 


44 


46 


27 


31 



Hop sequence {k} for SLAVE PAGE RESPONSE STATE: 



CLKN* = 
ULAP: 



0x0000010 
0x00000000 



Sticks: 


00 


02 


04 


06 


08 


Oa 


Oc 


oe 


10 


12 


14 


16 


18 


la 


ic 


le 


0x0000012: 


64 


02 


68 


04 


17 


06 


21 


08 


66 


10 


70 


12 


19 


14 


23 


16 


0x0000032: 


01 


18 


05 


20 


33 


22 


37 


24 


03 


26 


07 


28 


35 


30 


39 


32 


0x0000052 : 


72 


34 


76 


36 


25 


38 


29 


40 


74 


42 


78 


44 


27 


46 


31 


48 


0x0000072: 


09 


50 


13 


52 


41 


54 


45 


56 


11 


58' 


15 


60 


43 


62 


47 


00 



Hop sequence {k} for MASTER PAGE RESPONSE STATE: 

Offset value: 24 

CLKE* = 0x0000012 

ULAP: 0x00000000 

Sticks: 00 02 I 04 06 I 08 Oa | Oc Oe | 10 12 | 14 16 | 18 la 



Ic le 



0x0000014 
0x0000034 
0x0000054 
0x0000074 



02 68 
18 05 
34 76 
50 13 



04 17 

20 33 

36 25 

52 41 



06 21 

22 37 

38 29 

54 45 



08 66 
24 03 
40 74 
56 11 



10 70 
26 07 
42 78 
58 15 



12 19 
28 35 
44 27 
60 43 



14 23 
30 39 
46 31 
62 47 



16 01 
32 72 
48 09 
00 64 
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Bluetooth. 



Hop sequence {k) for CONNECTION STATE: 



CLK start: 
ULAP: 



0x0000010 
0x00000000 



#ticks: 


00 


02 


1 04 


06 


1 08 


Oa 


1 Oc 


Oe 


1 10 


12 


1 14 


16 


1 18 


la 


1 IC 


le 


0x0000010 


: 08 


66 


10 


70 


12 


19 


14 


23 


16 


01 


18 


05 


20 


33 


22 


37 


0x0000030 


: 24 


03 


26 


07 


28 


35 


30 


39 


32 


72 


34 


76 


36 


25 


38 


29 


0x0000050 


: 40 


74 


42 


78 


44 


27 


46 


31 


48 


09 


50 


13 


52 


41 


54 


45 


0x0000070 


: 56 


11 


58 


15 


60 


43 


62 


47 


32 


17 


36 


19 


34 


49 


38 


51 


0x0000090 


40 


21 


44 


23 


42 


53 


46 


55 


48 


33 


52 


35 


50 


65 


54 


67 


OxOOOOObO 


56 


37 


60 


39 


58 


69 


62 


71 


64 


25 


66 


27 


66 


57 


70 


59 


OxOOOOOdO 


72 


29 


76 


31 


74 


61 


78 


63 


01 


41 


05 


43 


03 


73 


07 


75 


OxOOOOOfO 


09 


45 


13 


47 


11 


77 


15 


00 


64 


49 


66 


53 


68 


02 


70 


06 


0x0000110 


' 01 


51 


03 


55 


05 


04 


07 


08 


72 


57 


74 


61 


76 


10 


78 


14 


0x0000130 


09 


59 


11 


63 


13 


12 


15 


16 


17 


65 


19 


69 


21 


18 


23 


22 


0x0000150 


33 


67 


35 


71 


37 


20 


39 


24 


25 


73 


27 


77 


29 


26 


31 


30 


0x0000170 


41 


75 


43 


00 


45 


28 


47 


32 


17 


02 


21 


04 


19 


34 


23 


36 


0x0000190 


33 


06 


37 


08 ■ 


35 


38 


39 


40 


25 


10 


29 


12 


27 


42 


31 


44 


OxOOOOlbO 


41 


14 


45 


16 


43 


46 


47 


48 


49 


18 


53 


20 


51 


50 


55 


52 


OxOOOOldO 


65 


22 


69 


24. 


67 


54 


71 


56 


57 


26 


61 


28 


59 


58 


63 


60 


OxOOOOlfO 


73 


30 


77 


32 


75 


62 


00 


64 


49 


34 


51 


42 


57 


66 


59 


74 


0x0000210 


53 


36 


55 


44 


61 


68 


63 


76 


65 


50 


67 


58 


73 


03 


75 


11 


0x0000230 


69 


52 


71 


60 


77 


05 


00 


13 


02 


38 


04 


46 


10 


70 


12 


78 


0x0000250 


06 


40 


08 


48 


14 


72 


16 


01 


18 


54 


20 


62 


26 


07 


28 


15 


0x0000270 


22 


56 


24 


64 


30 


09 


32 


17 


02 


66 


06 


74 


10 


19 


14 


27 


0x0000290 


04 


70 


08 


78 


12 


23 


16 


31 


18 


03 


22 


11 


26 


35 


30 


43 


0x00002b0 


20 


07 


24 


15 


28 


39 


32 


47 


34 


68 


38 


76 


42 


21 


46 


29 


0x00002d0 


36 


72 


40 


01 


44 


25 


48 


33 


50 


05 


54 


13 


58 


37 


62 


45 


0x00002fO 


52 


09 


56 


17 


60 


41 


64 


49 


34 


19 


36 


35 


50 


51 


52 


67 


0x0000310 


38 


21 


40 


37 


54 


53 


56 


69 


42 


27 


44 


43 


58 


59 


60 


75 


0x0000330 


46 


29 


48 


45 


62 


61 


64 


77 


66 


23 


68 


39 


03 


55 


05 


71 


0x0000350 


70 


25 


72 


41 


07 


57 


09 


73 


74 


31 


76 


47 


11 


63 


13 


00 


0x0000370 


78 


33 


01 


49 


15 


65 


17 


02 


66 


51 


70 


67 


03 


04 


07 


20 


0x0000390 : 


68 


55 


72 


71 


05 


08 


09 


24 


74 


59 


78 


75 


11 


12 


15 


28 


0x00003b0 : 


76 


63 


01 


00 


13 


16 


17 


32 


19 


53 


23 


69 


35 


06 


39 


22 


Ox00003d0: 


21 


57 


25 


73 


37 


10 


41 


26 


27 


61 


31 


77 


43 


14 


47 


30 


0x00003f0: 


29 


65 


33 


02 


45 


18 


49 


34 


19 


04 


21 


08 


23 


20 


25 


24 
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2.1.2 S c ndset 



Bluetooth. 



Set mode: 
Set clock: 
Set ULAP: 



7 9 HOP SYSTEM 



Hop sequence {k} for PAGE SCAN/ INQUIRY SCAN: 



CLKN start: 
ULAP: 



0x0000000 
0x2a96ef25 



#ticks: 


0000 


1000 


2000 


3000 


4000 


5000 


6000 


7000 


0x0000000 


49 


13 


17 


51 


55 


19 


23 


53 


0x0008000 


57 


21 


25 


27 


31 


74 


78 


29 


0x0010000 


33 


76 


1 


35 


39 


3 


7 


37 


0x0018000 


41 


5 


9 


43 


4.7 


11 


15 


45 


0x0020000 


49 


13 


17 


51 


55 


19 


23 


53 


0x0028000 


57 


21 


25 


27 


31 


74 


78 


29 


0x0030000 


33 


76 


1 


35 


39 


3 


7 


37 


0x0038000 


41 


5 


9 


43 


47 


11 


15 


45 



Hop sequence {k} for PAGE STATE/INQUIRY STATE: 



CLKE start: 
ULAP: 



0x0000000 
0x2a96ef25 



Hop sequence {k} for SLAVE PAGE RESPONSE STATE: 



CLKN* = 
ULAP: 



0x0000010 
0x2a96ef25 



#ticks: 


00 


01 


02 


03 


04 


05 


06 


07 


08 


09 


Oa 


Ob 


OC 


Od 


Oe 


Of 1 


0x0000000 


41 


05 


10 


04 


09 


43 


06 


16 


47 


11 


18 


12 


15 


45 


14 


32 


0x0000010 


49 


13 


34 


28 


17 


51 


30 


24 


55 


19 


26 


20 


23 


53 


22 


40 


0x0000020 


41 


05 


10 


04 


09 


43 


06 


16 


47 


11 


18 


12 


15 


45 


14 


32 


0x0000030, 


49 


13 


34 


28 


17 


51 


30 


24 


55 


19 


26 


20 


23 


53 


22 


40 


0x0001000 


41 


21 


10 


36 


25 


27 


38 


63 


31 


74 


65 


59 


78 


29 


61 


00 


0x0001010 


33 


76 


02 


75 


01 


35 


77 


71 


39 


03 


73 


67 


07 


37 


69 


08 


0x0001020 


41 


21 


10- 


36 


25 


27 


38 


63 


31 


74 


65 


59 


78 


29 


61 


00 


0x0001030 


33 


76 


02 


75 


01 


35 


77 


71 


39 


03 


73 


67 


07 


37 


69 


08 


0x0002000 


. 57 


21 


42 


36 


09 


43 


06 


16 


47 


11 


18 


12 


15 


45 


14 


32 


0x0002010 


49 


13 


34 


28 


17 


51 


30 


24 


55 


19 


26 


20 


23 


53 


22 


40 


0x0002020 


57 


21 


42 


36 


09 


43 


06 


16 


47 


11 


18 


12 


15 


45 


14 


32 


0x0002030 


49 


13 


34 


28 


17 


51 


30 


24 


55 


19 


26 


20 


23 


53 


22 


40 


0x0003000 


41 


05 


10 


04 


09 


27 


06 


63 


31 


74 


65 


59 


78 


29 


si 


00 


0x0003010 


33 


76 


02 


75 


01 


35 


77 


71 


39 


03 


73 


67 


07 


37 


69 


08 


0x0003020 


41 


05 


10 


04 


09 


27 


06 


63 


31 


74 


65 


59 


78 


29 


61 


00 


0x0003030 


33 


76 


02 


75 


01 


35 


77 


71 


39 


03 


73 


67 


07 


37 


69 


08 



#ticks : 


00 


02 


04 


06 


08 


Oa 


Oc 


Oe 


10 


12 


14 


16 


18 


la 


ic 


le 


0x0000012: 


34 


13 


28 


17 


30 


51 


24 


55 


26 


19 


20 


23 


22 


53 


40 


57 


0x0000032: 


42 


21 


36 


25 


38 


27 


63 


31 


65 


74 


59 


78 


61 


29 


00 


33 


0x0000052: 


02 


76 


75 


01 


77 


35 


71 


39 


73 


03 


67 


07 


69 


37 


08 


41 


0x0000072 : 


10 


05 


04 


09 


06 


43 


16 


47 


18 


11 


12 


15 


14 


45 


32 


49 



Hop sequence {k) for MASTER PAGE RESPONSE STATE: 

Offset value: 24 

CLKE* = 0x0000012 

ULAP: 0x2a96ef25 

#ticks: 00 02 | 04 06 | 08 Oa | Oc Oe | 10 12 | 14 16 | 18 la | Ic le 



0x0000014 
0x0000034 
0x0000054 
0x0000074 



13 28 
21 36 
76 75 
05 04 



17 30 
25 38 
01 77 
09 06 



51 24 
27 63 
35 71 
43 16 



55 26 
31 65 
3 9 73 
47 18 



19 20 
74 59 
03 67 
11 12 



23 22 
78 61 
07 69 
15 14 



53 40 
29 00 
37 08 
45 32 



57 42 
33 02 
41 10 
49 34 
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Appendix IV - Sample Data 



Bluetooth. 



Hop sequence {k} for CONNECTION STATE: 



CLK start: 
ULAP: 



0x0000010 
0x2a96ef25 



sticks: 


00 


02 


04 


06 


08 


Oa 


Oc 


Oe 


10 


12 


I 14 


16 


18 


la 


ic 


le 


GxOOOOOlO 


: 55 


26 


19 


20 


23 


22 


53 


40 


57 


42 


21 


36 


25 


38 


27 


63 


0x0000030 


: 31 


65 


74 


59 


78 


61 


29 


00 


33 


02 


76 


75 


01 


77 


35 


71 


0x0000050 


: 39 


73 


03 


67 


07 


69 


37 


08 


41 


10 


05 


04 


09 


06 


43 


16 


0x0000070 


47 


18 


11 


12 


15 


14 


45 


32 


02 


66 


47 


60 


49 


64 


04 


54 


0x0000090 


06 


58 


51 


52 


53 


56 


08 


70 


10 


74 


55 


68 


57 


72 


59 


14 


OxOOOOObO 


61 


18 


27 


12 


29 


16 


63 


30 


65 


34 


31 


28 


33 


32 


67 


22 


OxOOOOOdO 


69 


26 


35 


20 


37 


24 


71 


38 


73 


42 


39 


36 


41 


40 


75 


46 


OxOOOOOfO 


77 


50 


43 


44 


45 


48 


00 


62 


26 


11 


69 


05 


73 


07 


36 


17 


OxOOOOllO 


40 


19 


04 


13 


08 


15 


38 


25 


42 


27 


06 


21 


10 


23 


12 


48 


0x0000130 


16 


50 


59 


44 


63 


46 


14 


56 


18 


58 


61 


52 


65 


54 


28 


64 


0x0000150 


32 


66 


75 


60 


00 


62 


30 


72 


34 


74 


77 


68 


02 


70 


20 


01 


0x0000170 


24 


03 


67 


76 


71 


78 


22 


09 


58 


43 


24 


37 


26 


41 


68 


47 


0x0000190 


70 


51 


36 


45 


38 


49 


72 


55 


74 


59 


40 


53 


42 


57 


44 


78 


OxOOOOlbO 


46 


03 


12 


76 


14 


01 


48 


07 


50 


11 


16 


05 


18 


09 


60 


15 


OxOOOOldO 


62 


19 


28 


13 


30 


17 


64 


23 


66 


27 


32 


21 


34 


25 


52 


31 


OxOOOOlfO 


54 


35 


20 


29 


22 


33 


56 


39 


19 


04 


62 


63 


66 


00 


07 


73 


0x0000210 


11 


10 


54 


69 


58 


06 


23 


75 


27 


12 


70 


71 


74 


08 


76 


33 


0x0000230 


01 


49 


44 


29 


48 


45 


13 


35 


17 


51 


60 


31 


64 


47 


05 


41 


0x0000250 


09 


57 


52 


37 


56 


53 


21 


43 


25 


59 


68 


39 


72 


55 


78 


65 


0x0000270 


03 


02 


46 


61 


50 


77 


15 


67 


51 


36 


17 


18 


19 


34 


41 


24 


0x0000290 


43 


40 


09 


22 


11 


38 


57 


28 


59 


44 


25 


26 


27 


42 


29 


63 


0x00002b0 


31 


00 


76 


61 


78 


77 


45 


67 


47 


04 


13 


65 


15 


02 


37 


71 


0x00002d0 


39 


08 


05 


69 


07 


06 


53 


75 


55 


12 


21 


73 


23 


10 


33 


16 


Ox00002fO 


35 


32 


01 


14 


03 


30 


49 


20 


75 


60 


39 


48 


43 


56 


00 


66 


0x0000310 


04 


74 


47 


62 


51 


70 


08 


68 


12 


76 


55 


64 


59 


72 


61 


18 


0x0000330 


65 


26 


29 


14 


33 


22 


69 


20 


73 


28 


37 


16 


41 


24 


77 


34 


0x0000350 


02 


42 


45 


30 


49 


38 


06 


36 


10 


44 


53 


32 


57 


40 


63 


50 


0x0000370 


67 


58 


31 


46 


35 


54 


71 


52 


28 


13 


73 


03 


75 


11 


34 


17 


0x0000390 


36 


25 


02 


15 


04 


23 


42 


21 


44 


29 


10 


19 


12 


27 


14 


48 


0x00003b0 


16 


56 


61 


46 


63 


54 


22 


52 


24 


60 


69 


50 


71 


58 


30 


64 


0x00003d0 


32 


72 


77 


62 


00 


70 


38 


68 


40 


76 


06 


66 


08 


74 


18 


01 


Ox00003fO 


20 


09 


65 


78 


67 


07 


26 


05 


44 


29 


32 


23 


36 


25 


70 


43 
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Appendix IV - Sample Data 
2.1.3 Third set 



Bluetooth. 



Set mode: 
Set clock: 
Set ULAP: 



79 HOP SYSTEM 



Hop sequence {k} for PAGE SCAN/INQUIRY SCAN: 



CLKN start: 
ULAP: 



0x0000000 
0x6587cba9 



#ticks: 


0000 


1000 


2000 


3000 


4000 


5000 


6000 


7000 


0x0000000 


16 


65 


67 


18 


20 


53 


55 


6 


0x0008000 


8 


57 


59 


10 


12 


69 


71 


22 


0x0010000 


24 


73 


75 


26 


28 


45 


47 


77 


0x0018000 


0 


49 


51 


2 


4 


61 


63 


14 


0x0020000 


16 


65 


67 


18 


20 


53 


55 


6 


0x0028000 


8 


57 


59 


10 


12 


69 


71 


22 


0x0030000 


24 


73 


75 


26 


28 


45 


47 


77 


0x0038000 


0 


49 


51 


2 


4 


61 


63 


14 



Hop sequence {k} for PAGE STATE/ INQUIRY STATE: 



CLKE start : 
ULAP: 



0x0000000 
0x6587cba9 



Hop sequence {k} for SLAVE PAGE RESPONSE STATE: 



CLKN* = 
ULAP: 



0x0000010 
0x6587cba9 



#ticks: 


00 


01 


02 


03 


04 


05 


06 


07 


08 


09 


Oa 


Ob 


Oc 


Od 


Oe 


Of 1 


0x0000000 


: 00 


49 


36 


38 


51 


02 


42 


40 


04 


61 


44 


46 


63 


14 


50 


48 


0x0000010 


16 


65 


52 


54 


67 


18 


58 


56 


20 


53 


60 


62 


55 


06 


66 


64 


0x0000020 


00 


49 


36 


38 


51 


02 


42 


40 


04 


61 


44 


46 


63 


14 


50 


48 


0x0000030 


16 


65 


52 


54 


67 


18 


58 


56 


20 


53 


60 


62 


55 


06 


66 


64 


0x0001000 


00 


57 


36 


70 


59 


10 


74 


72 


12 


69 


76 


78 


71 


22 


03 


01 


0x0001010 


24 


73 


05 


07 


75 


26 


11 


09 


28 


45 


13 


30 


47 


77 


34 


32 


0x0001020 


00 


57 


36 


70 


59 


10 


74 


72 


12 


69 


76 


78 


71 


22 


03 


01 


0x0001030 


24 


73 


05 


07 


75 


26 


11 


09 


28 


45 


13 


30 


47 


77 


34 


32 


0x0002000 


08 


57 


68 


70 


51 


02 


42 


40 


04 


61 


44 


46 


63 


14 


50 


48 


0x0002010 


16 


65 


52 


54 


67 


18 


58 


56 


20 


53 


60 


62 


55 


06 


66 


64 


0x0002020 


08 


57 


68 


70 


51 


02 


42 


40 


04 


61 


44 


46 


63 


14 


50 


48 


0x0002030 


16 


65 


52 


54 


67 


18 


58 


56 


20 


53 


60 


62 


55 


06 


66 


64 


0x0003000 


00 


49 


36 


38 


51 


10 


42 


72 


12 


69 


76 


78 


71 


22 


03 


01 


0x0003010 


24 


73 


05 


07 


75 


26 


11 


09 


28 


45 


13 


30 


47 


77 


34 


32 


0x0003020 


00 


49 


36 


38 


51 


10 


42 


72 


12 


69 


76 


78 


71 


22 


03 


01 


0x0003030 


24 


73 


05 


07 


75 


26 


11 


09 


28 


45 


13 


30 


47 


77 


34 


32 



#ticks: 


00 


02 


04 


06 


08 


Oa 


Oc 


Oe 


10 


12 


14 


16 


18 


la 


ic 


le 


0x0000012 : 


52 


65 


54 


67 


58 


18 


56 


20 


60 


53 


62 


55 


66 


06 


64 


08 


0x0000032: 


68 


57 


70 


59 


74 


10 


72 


12 


76 


69 


78 


71 


03 


22 


01 


24 


0x0000052 : 


05 


73 


07 


75 


11 


26 


09 


28 


13 


45 


30 


47 


34 


77 


32 


00 


0x0000072 : 


36 


49 


38 


51 


42 


02 


40 


04 


44 


61 


46 


63 


50 


14 


48 


16 



Hop sequence {k} for MASTER PAGE RESPONSE STATE: 



Offset value: 
CLKE* = 
ULAP: 
#ticks: 



0x0000014 
0x0000034 
0x0000054 
0x0000074 



24 

0x0000012 
0x6587cba9 

00 02 I 04 06 I 08 Oa | Oc Oe | 10 12 | 14 16 



18 la I Ic le 



65 54 
57 70 
73 07 
49 38 



67 58 
59 74 
75 11 
51 42 



18 56 

10 72 

26 09 

02 40 



20 60 
12 76 
28 13 
04 44 



53 62 
69 78 
45 30 
61 46 



55 66 
71 03 
47 34 
63 50 



06 64 
22 01 
77 32 
14 48 



08 68 
24 05 
00 36 
16 52 
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Appendix IV • Sample Data 



Bluetooth. 



Hop sequence 
CLK start: 
ULAP: 



{k} for CONNECTION STATE: 
0x0000010 
0x6587cba9 



sticks: 


00 


02 


1 04 


06 


1 08 


Oa 


1 Oc 


Oe 


1 10 


12 


1 14 


16 


1 18 


la 


1 Ic 


le 


0x0000010 


: 20 


60 


53 


62 


55 


66 


06 


64 


08 


68 


57 


70 


59 


74 


10 


72 


0x0000030 


: 12 


76 


69 


78 


71 


03 


22 


01 


24 


05 


73 


07 


75 


11 


26 


09 


0x0000050 


: 28 


13 


45 


30 


47 


34 


77 


32 


00 


36 


49 


38 


51 


42 


02 


40 


0x0000070 


: 04 


44 


61 


46 


63 


50 


14 


48 


50 


05 


16 


07 


20 


09 


48 


11 


0x0000090 


: 52 


13 


06 


15 


10 


17 


38 


19 


42 


21 


08 


23 


12 


25 


40 


27 


OxOOOOObO 


: 44 


29 


22 


31 


26 


33 


54 


35 


58 


37 


24 


39 


28 


41 


56 


43 


OxOOOOOdO 


: 60 


45 


77 


62 


.02 


64 


30 


66 


34 


68 


00 


70 


04 


72 


32 


74 


OxOOOOOfO 


: 36 


76 


14 


78 


18 


01 


46 


03 


72 


29 


42 


39 


44 


43 


74 


41 


0x0000110 


: 76 


45 


46 


47 


48 


51 


78 


49 


01 


53 


50 


63 


52 


67 


03 


65 


0x0000130 


: 05 


69 


54 


55 


56 


59 


07 


57 


09 


61 


58 


71 


60 


75 


11 


73 


0x0000150 


: 13 


77 


30 


15 


32 


19 


62 


17 


64 


21 


34 


31 


36 


35 


66 


33 


0x0000170 


68 


37 


38 


23 


40 


27 


70 


25 


27 


61 


72 


71 


76 


73 


25 


75 


0x0000190 


29 


77 


78 


00 


03 


02 


31 


04 


35 


06 


01 


16 


05 


18 


33 


20 


OxOOOOlbO 


37 


22 


07 


08 


11 


10 


39 


12 


43 


14 


09 


24 


13 


26 


41 


28 


OxOOOOldO 


45 


30 


62 


47 


66 


49 


15 


51 


19 


53 


64 


63 


68 


65 


17 


67 


OxOOOOlf 0 


21 


69 


70 


55 


74 


57 


23 


59 


53 


22 


35 


12 


37 


28 


67 


14 


0x0000210 


69 


30 


23 


32 


25 


48 


55 


34 


57 


50 


39 


40 


41 


56 


71 


42 


0x0000230 


73 


58 


27 


36 


29 


52 


59 


38 


61 


54 


43 


44 


45 


60 


75 


46 


0x0000250 


77 


62 


15 


00 


17 


16 


47 


02 


49 


18 


31 


08 


33 


24 


63 


10 


0x0000270 


65 


26 


19 


04 


21 


20 


51 


06 


06 


54 


65 


42 


69 


58 


18 


46 


0x0000290 


22 


62 


55 


64 


59 


01 


08 


68 


12 


05 


71 


72 


75 


09 


24 


76 


Ox00002b0 


28 


13 


57 


66 


61 


03 


10 


70 


14 


07 


73 


74 


77 


11 


26 


78 


0x00002d0 


30 


15 


47 


32 


51 


48 


00 


36 


04 


52 


63 


40 


67 


56 


16 


44 


0x00002f0 


20 


60 


49 


34 


53 


50 


02 


38 


38 


78 


12 


05 


14 


13 


44 


07 


0x0000310 


46 


15 


16 


17 


18 


25 


48 


19 


50 


27 


24 


33 


26 


41 


56 


35 


0x0000330. 


58- 


43 


20 


21 


22 


29 


52 


23 


54 


31 


28 


37 


30 


45 


60 


39 


0x0000350 : 


62 


47 


00 


64 


02 


72 


32 


66 


34 


74 


08 


01 


10 


09 


40 


03 


0x0000370 : 


42 


11 


04 


68 


06 


76 


36 


70 


70 


31 


42 


35 


46 


43 


74 


39 


0x0000390: 


78 


47 


48 


49 


52 


57 


01 


53 


05 


61 


56 


65 


60 


73 


09 


69 


0x00003b0: 


13 


77 


50 


51 


54 


59 


03 


55 


07 


63 


58 


67 


62 


75 


11 


71 


0x00003dO: 


15 


00 


32 


17 


36 


25 


64 


21 


68 


29 


40 


33 


44 


41 


72 


37 


0x00003f0 : 


76 


45 


34 


19 


38 


27 


66 


23 


11 


71 


05 


18 


07 


22 


13 


20 



2.2 THE 23-HOP SYSTEM SAMPLE DATA 



2.2.1 First set 
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Appendix IV - Sample Data 



Bluetooth. 



Set mode: 
Set clock: 
Set aiAP: 



23 HOP SYSTEM 



Hop sequence {k} for PAGE SCAN/INQUIRY SCAN: 



CLKN start: 
ULAP: 



0x0000000 
0x00000000 



#ticks: 


0000 


1000 


2000 


3000 


4000 


5000 


6000 


7000 


0x0000000 


0 


2 


4 


6 


8 


10 


12 


14 


0x0008000 


16 


18 


20 


22 


1 


3 


5 


7 


0x0010000 


0 


2 


4 


6 


8 


10 


12 


14 


0x0018000 


16 


18 


20 


22 


1 


3 


5 


7 


0x0020000 


0 


2 


4 


6 


8 


10 


12 


14 


0x0028000 


16 


18 


20 


22 


1 


3 


5 


7 


0x0030000 


0 


2 


4 


6 


8 


10 


12 


14 


0x0038000 


16 


18 


20 


22 


1 


3 


5 


7 



Hop sequence {k} for PAGE STATE/INQUIRY STATE: 



CLKE start: 
ULAP: 



0x0000000 
0x00000000 



#ticks: 


00 


01 


02 


03 


04 


05 


06 


07 


08 


09 


Oa 


Ob 


Oc 


Od 


Oe 


Of 


0x0000000 


16 


18 


02 


10 


20 


22 


06 


14 


01 


03 


04 


12 


05 


07 


08 


16 


0x0000010 


00 


02 


09 


17 


04 


06 


13 


21 


08 


10 


11 


19 


12 


14 


15 


00 


0x0000020 


16 


18 


02 


10 


20 


22 


06 


14 


01 


03 


04 


12 


05 


07 


08 


16 


0x0000030 


00 


02 


09 


17 


04 


06 


13 


21 


08 


10 


11 


19 


12 


14 


15 


00 


oxdooiooo 


18 


20 


10 


06 


22 


01 


14 


04 


03 


05 


12 


08 


07 


00 


16 


09 


0x0001010 


02 


04 


17 


13 


06 


08 


21 


11 


10 


12 


19 


15 


14 


16 


00 


02 


0x0001020 


18 


20 


10 


06 


22 


01 


14 


04 


03 


05 


12 


08 


07 


00 


16 


09 


0x0001030 


02 


04 


17 


13 


06 


08 


21 


11 


10 


12 


19 


15 


14 


16 


00 


02 


0x0002000 


20 


22 


06 


14 


01 


03 


04 


12 


05 


07 


08 


16 


00 


02 


09 


17 


0x0002010 


04 


06 


13 


21 


08 


10 


11 


19 


12 


14 


15 


00 


16 


18 


02 


10 


0x0002020 


20 


22 


06 


14 


01 


03 


04 


12 


05 


07 


08 


16 


00 


02 


09 


17 


0x0002030 


04 


06 


13 


21 


08 


10 


11 


19 


12 


14 


15 


00 


16 


18 


02 


10 


0x0003000 


22 


01 


14 


04 


03 


05 


12 


08 


07 


00 


16 


09 


02 


04 


17 


13 


0x0003010 


06 


08 


21 


11 


10 


12 


19 


15 


14 


16 


00 


02 


18 


20 


10 


06 


0x0003020 


22 


01 


14 


04 


03 


05 


12 


08 


07 


00 


16 


09 


02 


04 


17 


13 


0x0003030 


06 


08 


21 


11 


10 


12 


19 


15 


14 


16 


00 


02 


18 


20 


10 


06 



Hop sequence {k} for SLAVE PAGE RESPONSE STATE: 



CLKN* = 
ULAP: 



0x0000010 
0x00000000 



#ticks: 


00 


02 


04 


06 


08 


Oa 


Oc 


Oe 


10 


12 


14 


16 


18 


la 


IC 


le 


0x0000012: . 


09 


02 


17 


04 


13 


06 


21 


08 


11 


10 


19 


12 


15 


14 


00 


16 


0x0000032 : 


02 


18 


10 


20 


06 


22 


14 


01 


04 


03 


12 


05 


08 


07 


16 


00 


0x0000052 : 


09 


02 


17 


04 


13 


06 


21 


08 


11 


10 


19 


12 


15 


14 


00 


16 


0x0000072 : 


02 


18 


10 


20 


06 


22 


14 


01 


04 


03 


12 


05 


08 


07 


16 


00 



Hop sequence {k} for MASTER PAGE RESPONSE STATE: 

Offset value: 24 

CLKE* = 0x0000012 

ULAP: 0x00000000 

#ticks: 00 02 | 04 06 | 08 Oa | Oc Oe j 10 12 j 14 16 | 18 la | Ic le | 



0x0000014: 
0x0000034 : 



02 17 
18 10 



04 13 
20 06 



06 21 
22 14 



08 11 
01 04 



10 19 
03 12 



12 15 
05 08 



14 00 
07 16 



16 02 
00 09 
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Appendix IV - Sample Data 



Bluetooth. 



0x0000054: 02 17 I 04 13 I 06 21 1 08 11 I 10 19 I 12 15 I 14 00 I 16 02 I 

0x0000074: 18 10 | 20 06 | 22 14 | 01 04 | 03 12 | 05 08 | 07 16 | 00 09 | 

Hop sequence {k} for CONNECTION STATE: 

CLK start: 0x0000010 

ULAP: 0x00000000 



tit- 1 r*'\rts • 


u u 


U^ 


U4 


0 6 


08 


Od 


1 uc 


Oe 


1 n 
10 


12 


1 1 VI 

14 


16 


1 Q 

18 


la 


Ic 


le 




u o 


T 1 
±± 


X u 


X y 




X3 


14 


00 


16 


02 


18 


10 


2 0 


06 


22 


14 


n vn n n n n 1 n 
uxu u u u U J u 


: 0 1 


04 


U J 


12 


05 


08 


0 7 


16 


16 


02 


18 


10 


20 


06 


22 


14 


uxu u u U U D u 


U J. 




U J 


xz 


Ud 


0 8 


0 7 


16 


09 


18 


11 


03 


13 


22 


15 


07 


uxu u u u u / u 


17 


2 0 


1 9 


05 


21 


01 


00 


09 


09 


18 


13 


03 


11 


20 


15 


05 


n-w-n nn nn on 
uxu UU UU 


i. / 




o 1 
zx 


u / 


19 


0 1 


0 0 


09 


02 


11 


06 


19 


04 


13 


08 


21 


uxu uu UUOU 


1 0 


15 


14 


0 0 


12 


17 


16 


02 


02 


11 


06 


19 


04 


13 


08 


21 


UXU uu UUuU 


10 


15 


14 


0 0 


12 


17 


16 


02 


18 


04 


22 


12 


20 


06 


01 


14 


UXU u u uu r u 


03 


08 


07 


16 


05 


10 


0 9 


18 


18 


04 


20 


20 


22 


08 


01 


01 


UXU 000X10 


11 


06 


13 


22 


15 


10 


17 


03 


03 


12 


05 


05 


07 


16 


09 


09 


UXU UU Ui. J u 


19 


14 


21 


07 


00 


18 


02 


11 


11 


20 


13 


13 


15 


01 


17 


17 


uxu uu U J.3U 


04 


22 


06 


15 


08 


03 


10 


19 


19 


05 


21 


21 


00 


09 


02 


02 


UXU UU Ul /u 


12 


07 


14 


0 0 


16 


11 


18 


04 


04 


13 


08 


06 


06 


15 


10 


08 


0x0000190 


20 


17 


01 


10 


22 


19 


03 


12 


12 


21 


16 


14 


14 


00 


18 


16 


OxOOOOlbO 


05 


02 


09 


18 


07 


04 


11 


20 


20 


06 


01 


22 


22 


08 


03 


01 


OxOOOOldO 


13 


10 


17 


03 


15 


12 


19 


05 


05 


14 


09 


07 


07 


16 


11 


09 


OxOOOOlf 0 


21 


18 


02 


11 


00 


20 


04 


13 


13 


22 


06 


07 


17 


03 


10 


11 


0x0000210 


21 


15 


14 


GO 


02 


19 


18 


04 


15 


01 


08 


09 


19 


05 


12 


13 


0x0000230 


00 


17 


16 


02 


04 


21 


20 


06 


06 


15 


22 


00 


10 


19 


03 


04 


0x0000250 


14 


08 


07 


16 


18 


12 


11 


20 


08 


17 


01 


02 


12 


21 


05 


06 


0x0000270 


16 


10 


09 


18 


20 


14 


13 


22 


22 


08 


15 


16 


01 


10 


17 


18 


0x0000290 


07 


01 


00 


09 


09 


03 


02 


11 


03 


12 


19 


20 


05 


14 


21 


22 


0x00002b0 


11 


05 


04 


13 


13 


07 


06 


15 


15 


01 


08 


09 


17 


03 


10 


11 


0x00002d0 


00 


17 


16 


02 


02 


19 


18 


04 


19 


05 


12 


13 


21 


07 


14 


15 


Ox00002f0 


04 


21 


20 


06 


06 


00 


22 


08 


08 


17 


16 


10 


12 


21 


20 


14 


0x0000310 


01 


02 


09 


18 


05 


06 


13 


22 


10 


19 


18 


12 


14 


00 


22 


16 


0x0000330 


03 


04 


11 


20 


07 


08 


15 


01 


01 


10 


09 


03 


05 


14 


13 


07 


0x0000350 


17 


18 


02 


11 


21 


22 


06 


15 


03 


12 


11 


05 


07 


16 


15 


09 


0x0000370: 


19 


20 


04 


13 


00 


01 


08 


17 


17 


03 


02 


19 


19 


05 


04 


21 


0x0000390 : 


10 


11 


18 


04 


12 


13 


20 


06 


21 


07 


06 


00 


00 


09 


08 


02 


0x00003b0 : 


14 


15 


22 


08 


16 


17 


01 


10 


10 


19 


18 


12 


12 


21 


20 


14 


0x00003d0 : 


03 


04 


11 


20 


05 


06 


13 


22 


14 


00 


22 


16 


16 


02 


01 


18 


0x00003f0 : 


07 


08 


15 


01 


09 


10 


17 


03 


03 


12 


05 


16 


11 


20 


13 


01 
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Appendix IV - Sample Data BlUetOOttl 
2.2.2 Sec nd set 



Set mode: 
Set clock: 
Set ULAP: 



23 HOP SYSTEM 



Hop sequence {k} for PAGE SCAN/ INQUIRY SCAN: 



CLKN start: 
ULAP: 



0x0000000 
0x2a96ef25 



#ticks : 


0000 


1000 


2000 


3000 


4000 


5000 


6000 


7000 


0x0000000 


7 


18 


3 


8 


16 


4 


12 


1 


0x0008000 


9 


20 


5 


6 


14 


2 


10 


22 


0x0010000 


7 


18 


3 


8 


16 


4 


12 


1 


0x0018000 


9 


20 


5 


6 


14 


2 


10 


22 


0x0020000 


7 


18 


3 


6 


16 


4 


12 


1 


0x0028000 


9 


20 


5 


6 


14 


2 


10 


22 


0x0030000 


7 


18 


3 


8 


16 


4 


12 


1 


0x0038000 


9 


20 


5 


6 


-14 


2 


10 


22 



Hop sequence {k} for PAGE STATE/ INQUIRY STATE: 



CLKE Start: 
ULAP: 



0x0000000 
0x2a96ef25 



Hop sequence {k} for SLAVE PAGE RESPONSE STATE: 



#ticks: 


00 


01 


02 


03 


04 


05 


06 


07 


08 


09 


Oa 


Ob 


Oc 


Od 


Oe 


Of 


0x0000000 


: 09 


20 


18 


00 


05 


06 


02 


04 


14 


02 


06 


11 


10 


22 


13 


12 


0x0000010 


07 


18 


14 


19 


03 


08 


21 


08 


16 


04 


10 


15 


12 


01 


17 


16 


0x0000020 


09 


20 


18 


00 


05 


06 


02 


04 


14 


02 


06 


11 


10 


22 


13 


12 


0x0000030 


07 


18 


14 


19 


03 


08 


21 


08 


16 


04 


10 


15 


12 


01 


17 


16 


0x0001000 


20 


05 


00 


02 


06 


14 


04 


06 


02 


10 


11 


13 


22 


07 


12 


14 


0x0001010 


18 


03 


19 


21 


08 


16 


08 


10 


04 


12 


15 


17 


01 


09 


16 


18 


0x0001020 


20 


05 


00 


02 


06 


14 


04 


06 


02 


10 


11 


13 


22 


07 


12 


14 


0x0001030 


18 


03 


19 


21 


08 


16 


08 


10 


04 


12 


15 


17 


01 


09 


16 


18 


0x0002000 


05 


06 


02 


04 


14 


02 


06 


11 


10 


22 


13 


12 


07 


18 


14 


19 


0x0002010 


03 


08 


21 


08 


16 


04 


10 


15 


12 


01 


17 


16 


09 


20 


18 


00 


0x0002020 


05 


06 


02 


04 


14 


02 


06 


11 


10 


22 


13 


12 


07 


18 


14 


19 


0x0002030 


03 


08 


21 


08 


16 


04 


10 


IS 


12 


01 


17 


16 


09 


20 


18 


00 


0x0003000 


06 


14 


04 


06 


02 


10 


11 


13 


22 


07 


12 


14 


18 


03 


19 


21 


0x0003010 


08 


16 


08 


10 


04 


12 


15 


17 


01 


09 


16 


18 


20 


05 


00 


02 


0x0003020 


06 


14 


04 


06 


02 


10 


11 


13 


22 


07 


12 


14 


18 


03 


19 


21 


0x0003030 


08 


16 


08 


10 


04 


12 


15 


17 


01 


09 


16 


18 


20 


05 


00 


02 



CLKN* = 
ULAP: 
#ticks: 


0x0000010 
0x2a96ef25 
00 1 02 04 


06 


08 


Oa 


Oc 


Oe 


10 


12 


14 


16 


18 


la 


ic 


le 


0x0000012 : 


14 


18 19 


03 


21 


08 


08 


16 


10 


04 


15 


12 


17 


01 


16 


09 


0x0000032: 


18 


20 00 


05 


02 


06 


04 


14 


06 


02 


11 


10 


13 


22 


12 


07 


0x0000052: 


14 


18 19 


03 


21 


08 


08 


16 


10 


04 


15 


12 


17 


01 


16 


09 


0x0000072 : 


18 


20 00 


05 


02 


06 


04 


14 


06 


02 


11 


10 


13 


22 


12 


07 



Hop sequence 
Offset value 
CLKE* = 
ULAP: 
#ticks: 

0x0000014: 
0x0000034 : 



{k} for ^4ASTER PAGE RESPONSE STATE: 
24 

.0x0000012 
Ox2a96ef25 

00 02 I 04 06 I 08 Oa | Oc Oe | 10 12 | 14 16 | 18 la 



Ic le 



18 19 

20 00 



03 21 
05 02 



08 08 
06 04 



16 10 
14 06 



04 15 
02 11 



12 17 
10 13 



01 16 
22 12 



09 18 
07 14 
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Bluetooth. 



0x0000054 : 
0x0000074: 

Hop sequence 
CLK start: 
ULAP: 



18 19 
20 00 



03 21 
05 02 



08 08 
06 04 



16 10 
14 06 



04 15 
02 11 



12 17 
10 13 



01 16 
22 12 



09 18 
07 14 



{k} for CONNECTION STATE: 
0x0000010 
0x2a96ef25 





00 


02 


04 


06 


08 


Oa 


uc 


Oe 


1 n 
xu 


1 0 
-LZ 


14 


1 c 
Xb 


1 R 


la 


1^ 
IC 


le 




16 


1 n 


v** 


X3 


12 


17 


m 

U X 


xo 


nQ 

U J 


1 ft 
XO 


Oft 

zu 


ftft 

UU 


ft 

u o 


no 
uz 


ftC 

Uo 


04 


0x0000030 


14 


06 


02 




10 




00 

zz 


12 


00 


n7 
u / 


XX 


1 o 

xz 


X ^ 


1 A 


fti 
UX 


01 


0x0000050 


0 9 


03 


20 


08 


05 


10 


17 


09 


02 


XX 


1 -1 
X J 


Xb 


O 1 
Z X 


xo 


oo 
zz 


O ft 

zu 


\j \j \j \j yj /u 


u / 




xo 


f\A 

\j*t 


U J 


nc 

U D 


X 3 


U3 


1 A 
X4 


ftO 

uz 


f\A 


ft c 
U3 


1 o 

xz 


ftQ 

uy 


17 


15 


Oxonnnn Qfi 




X 7 


X 3 


zz 


UU 


U J 


X U 


nn 

UU 


xo 


ftA 

u* 


ft a 
Uo 


no 
u / 


X b 


1 1 

IX 


13 


13 


n-vfino nohn 

\J A\J \J \J \J \J kjxj 


21 


17 


^ J_ 


20 


19 


01 


06 


21 


07 


xo 


O ft 

z u 


Ol 

zx 


ft Q 
u o 


no 
uz 


xu 


0 8 




A. O 


12 


uo 


X 3 


16 


1 9 


ft 1 

U J 


XO 


XX 


O ft 

z u 


fti 
ux 


ftft 

UU 


ft o 

u y 


nA 

U4 


06 


06 


UAU \J\J UU L.U 


1 A 


xu 




X J 


xz 


X / 


o o 
zz 


1 A 
X^ 


ftO 
UZ 


0 9 


05 


22 


2 1 


01 


03 


18 




1 Q 


o n 
z u 


zz 


T ft 
X U 


X3 


xz 


X X 


XX 


nA 

U4 


x^ 


ftT 
U / 


03 


0 0 


05 


01 


14 


uxu U U U X J u 


1 T 


Xb 


O ft 


ft C 


X J 


ft fi 


ft Q 


u / 


18 


02 


21 


15 


14 


17 


19 


11 


n-wfinnm ^n 


1 O 


x^ 


X3 


ftl 


ft Q 
Uo 


ft c 

U 3 


U4 


04 


20 


0 6 


00 


19 


16 


21 


17 


07 


n-vfi nom in 

UaUUUUX /u 


X u 




X.3 


ZZ 


ftC 

Uo 


ft T 
U X 


ft "5 
U Z 


ft ft 
u u 


ft Q 
US 


O ft 

z u 


X4 


ft o 

Uo 


ft o 

u / 


12 


12 


02 


0x0000190 


05 


06 


10 


17 


03 


21 


20 


18 


13 


22 


18 


10 


11 


14 


08 


00 


OxOOOOlbO 


01 


04 


06 


15 


22 


19 


16 


16 


02 


13 


07 


01 


00 


05 


05 


18 


OxOOOOldO 


21 


22 


03 


10 


19 


14 


13 


11 


06 


15 


11 


03 


04 


07 


01 


16 


OxOOOOlfO 


17 


20 


22 


08 


15 


12 


09 


09 


20 


00 


08 


05 


12 


07 


02 


02 


0x0000210 


06 


04 


17 


09 


21 


11 


18 


06 


22 


08 


10 


13 


14 


15 


00 


17 


0x0000230 


04 


19 


15 


01 


19 


03 


16 


21 


13 


16 


01 


21 


05 


00 


18 


18 


0x0000250 


22 


20 


10 


02 


14 


04 


11 


22 


15 


01 


03 


06 


07 


08 


16 


10 


0x0000270 


20 


12 


08 


17 


12 


19 


09 


14 


04 


09 


17 


12 


19 


16 


13 


11 


0x0000290 


15 


15 


05 


18 


07 


22 


06 


13 


08 


17 


21 


20 


00 


01 


09 


03 


0x00002b0 


11 


07 


01 


10 


03 


14 


02 


05 


20 


02 


10 


05 


12 


09 


06 


04 


0x00002d0 


08 


08 


21 


11 


00 


15 


22 


06 


01 


10 


14 


13 


16 


17 


02 


19 


0x00002f0 


04 


00 


17 


03 


19 


07 


18 


21 


15 


10 


18 


00 


22 


02 


05 


20 


0x0000310 


09 


22 


12 


12 


16 


14 


13 


01 


17 


03 


20 


16 


01 


18 


03 


04 


0x0000330 


07 


06 


10 


19 


14 


21 


11 


08 


08 


03 


11 


16 


15 


18 


21 


13 


0x0000350 


02 


15 


05 


05 


09 


07 


06 


17 


10 


19 


13 


09 


17 


11 


19 


20 


0x0000370 


00 


22 


03 


12 


07 


14 


04 


01 


22 


19 


04 


07 


06 


11 


16 


06 


0x0000390 


18 


10 


00 


21 


02 


02 


01 


08 


03 


12 


08 


00 


10 


04 


12 


13 


0x00003b0 


14 


17 


19 


05 


21 


09 


20 


15 


15 


12 


20 


00 


22 


04 


09 


22 


0x00003d0 


11 


03 


16 


14 


18 


18 


17 


01 


19 


05 


01 


16 


03 


20 


05 


06 


0x00003f0 


07 


10 


12 


21 


14 


02 


13 


08 


19 


17 


07 


22 


15 


15 


02 


20 
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Appendix IV - Sample Data BlUGtOOth 
2.2.3 Third set 



Set mode: 
Set clock: 
Set ULAP: 



23 HOP SYSTEM 



Hop sequence {k} for PAGE SCAN/INQUIRY SCAN: 



CLKN start: 
ULAP: 



0x0000000 
Ox6587cba9 



Sticks: 


0000 


1000 


2000 


3000 


4000 


5000 


6000 


7000 


0x0000000 


0 


10 


14 


12 


16 


9 


13 


11 


0x0008000 


15 


2 


6 


4 


8 


17 


21 


19 


0x0010000 


0 


10 


14 


12 


16 


9 


13 


11 


0x0018000 


15 


2 


6 


4 


8 


17 


21 


19 


0x0020000 


0 


10 


14 


12 


16 


9 


13 


11 


0x0028000 


15 


2 


6 


4 


8 


17 


21 


19 


0x0030000 


0 


10 


14 


12 


16 


9 


13 


11 


0x0038000 


15 


2 


6 


4 


8 


17 


21 


19 



Hop sequence {k} for PAGE STATE/ INQUIRY STATE: 



CLKE start: 
ULAP: 



0x0000000 
0x6587cba9 



Hop sequence {k} for SLAVE PAGE RESPONSE STATE: 



CLKN* 
ULAP: 



0x0000010 
0x6587cba9 



#ticks: 


00 


01 


02 


03 


04 


05 


06 


07 


08 


09 


Oa 


Ob 


oc 


Od 


Oe 


Of 


0x0000000 


: 15 


02 


OS 


11 


06 


04 


19 


13 


08 


17 


21 


22 


21 


19 


07 


01 


0x0000010 


: 00 


10 


09 


15 


14 


12 


00 


17 


16 


09 


02 


18 


. 13 


11 


03 


20 


0x0000020 


: 15 


02 


05 


11 


06 


04 


19 


13 


08 


17 


21 


22 


21 


19 


07 


01 


0x0000030 


: 00 


10 


09 


15 


14 


12 


00 


17 


16 


09 


02 


18 


13 


11 


03 


20 


0x0001000 


02 


06 


11 


19 


04 


08 


13 


21 


17 


21 


22 


07 


19 


00 


01 


09 


0x0001010 


10 


14 


15 


00 


12 


16 


17 


02 


09 


13 


18 


03 


11 


15 


20 


05 


0x0001020 


02 


06 


11 


19 


04 


08 


13 


21 


17 


21 


22 


07 


19 


00 


01 


09 


0x0001030 


10 


14 


15 


00 


- 12 


16 


17 


02 


09 


13 


18 


03 


11 


15 


20 


05 


0x0002000 


06 


04 


19 


13 


08 


17 


21 


22 


21 


19 


07 


01 


00 


10 


09 


15 


0x0002010 


14 


12 


00 


17 


16 


09 


02 


18 


13 


11 


03 


20 


15 


02 


05 


11 


0x0002020 


06 


04 


19 


13 


08 


17 


21 


22 


21 


19 


07 


01 


00 


10 


09 


15 


0x0002030 


14 


12 


00 


17 


16 


09 


02 


18 


13 


11 


03 


20 


15 


02 


05 


11 


0x0003000 


04 


08 


13 


21 


17 


21 


22 


07 


19 


00 


01 


09 


10 


14 


15 


00 


0x0003010 


12 


16 


17 


02 


09 


13 


18 


03 


11 


15 


20 


05 


02 


06 


11 


19 


0x0003020 


04 


08 


13 


21 


17 


21 


22 


07 


19 


00 


01 


09 


10 


14 


15 


00 


0x0003030 


12 


16 


17 


02 


09 


13 


18 


03 


11 


15 


20 


05 


02 


06 


11 


19 



#ticks: 


00 


02 


04 


06 


08 


Oa 


Oc 


oe 


10 


12 


14 


16 


18 


la 


ic 


le 


0x0000012: 


09 


10 


15 


14 


00 


12 


17 


16 


02 


09 


18 


13 


03 


11 


20 


15 


0x0000032 : 


05 


02 


11 


06 


19 


04 


13 


08 


21 


17 


22 


21 


07 


19 


01 


00 


0x0000052 : 


09 


10 


15 


14 


00 


12 


17 


16 


02 


09 


18 


13 


03 


11 


20 


15 


0x0000072 : 


05 


02 


11 


06 


19 


04 


13 


08 


21 


17 


22 


21 


07 


19 


01 


00 



Hop sequence {k} for MASTER PAGE RESPONSE STATE: 
Offset value: 24 
CLKE* = 0x0000012 
ULAP: Ox6587cba9 
Sticks: 00 02 I 04 06 



I 08 Oa I Oc Oe | 10 12 | 14 16 | 18 la | Ic le | 



0x0000014 : 
0x0000034 : 



10 15 
02 11 



14 00 
06 19 



12 17 
04 13 



16 02 
08 21 



09 18 
17 22 



13 03 
21 07 



11 20 
19 01 



15 05 
00 09 
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Appendix fV- Sample Data 



Bluetooth. 



0x0000054: 10 15 I 14 00 I 12 17 I 16 02 I 09 18 I 13 03 I 11 20 1 15 05 I 

0x0000074: 02 11 | 06 19 | 04 13 | 08 21 | 17 22 | 21 07 | 19 01 | 00 09 | 

Hop sequence {k} for CONNECTION STATE: 

CLK start: 0x0000010 

ULAP: 0x6587cba9 



#tickS : 


00 


02 


04 


06 


08 


Oa 


Oc 


Oe 


10 


12 


14 


16 


18 


la 


ic 


le 


0x0000010 


: 16 


02 


09 


18 


13 


03 


11 


20 


15 


05 


02 


11 


06 


19 


04 


13 


0x0000030 


08 


21 


17 


22 


21 


07 


19 


01 


16 


02 


03 


08 


07 


16 


05 


10 


0x0000050 


09 


18 


02 


11 


06 


19 


04 


13 


08 


21 


18 


04 


22 


12 


20 


06 


0x0000070 


01 


14 


10 


15 


14 


00 


12 


17 


09 


18 


19 


22 


21 


07 


00 


03 


0x0000090 


02 


11 


18 


04 


20 


12 


22 


08 


01 


16 


11 


20 


13 


05 


15 


01 


OxOOOOObO 


17 


09 


03 


06 


05 


14 


07 


10 


02 


11 


12 


15 


14 


00 


16 


19 


OxOOOOOdO 


18 


04 


11 


20 


13 


05 


15 


01 


17 


09 


04 


13 


06 


21 


08 


17 


OxOOOOOfO 


10 


02 


19 


22 


21 


07 


00 


03 


03 


12 


05 


02 


09 


18 


07 


04 


0x0000110 


11 


20 


04 


13 


08 


06 


06 


15 


10 


08 


12 


21 


16 


14 


14 


00 


0x0000130 


18 


16 


20 


17 


01 


10 


22 


19 


19 


05 


21 


18 


02 


11 


00 


20 


0x0000150 


04 


13 


20 


06 


01 


22 


22 


08 


03 


01 


05 


14 


09 


07 


07 


16 


0x0000170 


11 


09 


13 


10 


17 


03 


15 


12 


12 


21 


14 


09 


16 


02 


18 


13 




2 0 


06 


13 


22 


15 


15 


17 


03 


19 


19 


21 


07 


00 


00 


02 


11 


OxOOOOlbO 


04 


04 


06 


01 


08 


17 


10 


05 


05 


14 


07 


02 


09 


18 


11 


06 


OxOOOOldO 


13 


22 


06 


15 


08 


08 


10 


19 


12 


12 


14 


00 


16 


16 


18 


04 


OxOOOOlfO 


20 


20 


22 


17 


01 


10 


03 


21 


13 


22 


17 


05 


21 


07 


02 


13 


0x0000210 


06 


15 


22 


08 


03 


10 


07 


16 


11 


18 


15 


01 


19 


03 


00 


09 


0x0000230 


04 


11 


01 


12 


05 


14 


09 


20 


06 


15 


10 


21 


14 


00 


18 


06 


0x0000250 


22 


08 


IS 


01 


19 


03 


00 


09 


04 


11 


08 


17 


12 


19 


16 


02 


0x0000270 


20 


04 


17 


05 


21 


07 


02 


13 


22 


08 


05 


12 


07 


16 


13 


20 


0x0000290 


15 


01 


08 


17 


10 


21 


16 


02 


18 


06 


01 


10 


03 


14 


09 


18 


Ox00002b0 


11 


22 


12 


19 


14 


00 


20 


04 


15 


01 


21 


05 


00 


09 


06 


13 


Ox00002d0 


08 


17 


01 


10 


03 


14 


09 


18 


11 


22 


17 


03 


19 


07 


02 


11 


0x00002f0 


04 


15 


05 


12 


07 


16 


13 


20 


16 


02 


04 


15 


08 


17 


20 


08 


0x0000310 


01 


10 


17 


03 


21 


05 


10 


19 


14 


21 


02 


11 


06 


13 


18 


04 


0x0000330 


22 


06 


19 


07 


00 


09 


12 


00 


09 


18 


20 


08 


01 


10 


13 


01 


0x0000350 


17 


03 


10 


19 


14 


21 


03 


12 


07 


14 


18 


04 


22 


06 


11 


20 


0x0000370 


15 


22 


12 


00 


16 


02 


05 


16 


02 


11 


15 


22 


17 


03 


08 


IS 


0x0000390 


10 


19 


03 


12 


05 


16 


19 


05 


21 


09 


11 


20 


13 


01 


04 


13 


0x00003b0 


06 


17 


07 


14 


09 


18 


00 


07 


18 


04 


08 


15 


10 


19 


01 


08 


0x00003d0 


03 


12 


19 


05 


21 


09 


12 


21 


14 


02 


04 


13 


06 


17 


20 


06 


0x00003f0 


22 


10 


00 


07 


02 


11 


16 


00 


15 


01 


01 


18 


17 


03 


03 


20 
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Appendix IV - Sample Data 

3 ACCESS CODE SAMPLE DATA 



Different access codes (GIAC, DIACs, others...) 

LAP with LSB as rightmost bit. 

Bit transmit order on air 



IiAP: I Preamble:] Sync word: [ Trailer: | 



000000 


1 5 


1 7e7041e3 


4000000d 1 


5 


ff ffff 


1 ^ 


1 e758b522 


7f£fff£2 1 


a 


9e8b33 


1 5 


1 475c58cc 


73345e72 | 


a 


9e8b34 


1 5 


1 28ed3c34 


cb345e72 1 


a 


gedb36 


1 5 


1 62337b64 


Ib345e72 | 


a 


9e8b39 


1 ^ 


1 c05747b9 


e7345e72 1 


a 


9e8b3d 


1 5 


1 7084eabO 


2£345e72 | 


a 


9e8b42 


1 5 


1 64c86d2b 


90b45e72 | 


a 


9eBb48 


1 ^ 


1 e3c3725e 


04b45e72 1 


a 


9e8b4f 


1 ^ 


1 8c7216a6 


bcb4Se72 1 


a 


9e8b57 


1 ^ 


1 b2fl6c30 


£ab4 5e72 | 


a 


9e8b60 


1 5 


1 57bd3b22 


clb4 5e72 I 


a 


9e8b6a 


1 ^ 


1 d0b62457 


55b45e72 | 


a 


9e8b75 


1 ^ 


1 81843a39 


abb4 5e72 | 


a 


9edb81 


1 5 


1 0ca96681 


e0745e72 | 


a 


9edbde 


1 ^ 


1 aecdSaSc 


Ic745e72 | 


a 


9e8b9c 


1 5 


1 17453fbf 


ce745e72 | 


a 


9edbab 


1 ^ 


1 f2096Bad 


£5745e72 | 


a 


9e8bbb 


1 5 


1 015f4ale 


£7745e72 [ 


a 


9e8bcc 


1 ^ 


1 d8c695a0 


0cf45e72 | 


a 


9e8bde 


1 5 


1 614e£043 


de£45e72 | 


a 


9e8bfl 


1 ^ 


1 ba81ddc7 


a3£45e72 | 


a 


9e8c05 


1 5 


1 64a7dc4f 


680c5e72 | 


a 


9e8cla 


1 5 


1 3595C221 


960c5e72 | 


a 


9e8c30 


1 ^ 


1 cb3SccOd 


830c5e72 | 


a 


9e8c47 


1 5 


1 12acl3b3 


788c5e72 | 


a 


9e8c5f 


1 5 


1 2c2£6925 


3e8c5e72 | 


a 


9e8c78 


1 5 


1 3a351cd4 


078c5e72 1 


a 


9e8c92 


1 5 


1 7396d0f3 


124c5e72 | 


a 


9 e Scad 


1 5 


1 5b0fdfc4 


6d4c5e72 | 


a 


9e8cc9 


1 ^ 


1 aea2eb38 


e4cc5e72 | 


a 


9e8ce6 


I 5 


1 756dc6bc 


99cc5e72 | 


a 


9e8d04 


1 5 


1 214c£934 


882c5e72 | 


a 


9e8d23 


1 5 


1 37568C95 


bl2c5e72 | 


a 


9e8d43 


1 5 


1 72281560 


£0ac5e72 | 


a 


9eBd64 


1 5 


1 643260cl 


c9ac5e72 | 


a 


9e8d86 


1 ^ 


1 e044£493 


986c5e72 | 


a 


9e8da9 


1 5 


1 3b8bd917 


e56c5e72 | 


a 


9e8dcd 


I a 


1 ce26edeb 


6cec5e72 | 


a 


9e8df2 


1 ^ 


1 e6b£e2dc 


13ec5e72 | 


a 


9eSeia 


1 ^ 


1 82dcde3d 


c61c5e72 1 


a 


9e8e3£ 


1 ^ 


I 94c6ab9c 


££lc5e72 | 


a 
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Appendix IV - Sample Data 



Bluetooth. 



9e8e67 


1 ^ 


1 969059a6 


799c5e72 1 


a 


9e8e90 


1 ^ 


1 c4dfccef 


425c5e72 1 


a 


9e8eba 


1 5 


1 3a7fc2c3 


575c5e72 | 


a 


9e8ee5 


1 5 


1 57985401 


69dc5e72 | 


a 


9e8fll 


1 5 


1 0ae2a363 


623c5e72 | 


a 


9e8f3e 


1 ^ 


1 dl2d8ee7 


I£3c5e72 | 


a 


9e8f6c 


1 5 


1 547063a8 


0dbc5e72 | 


a 


9e8£9b 


1 5 


I 063££6el 


367c5e72 | 


a 


9eafcb 


1 ^ 


1 c9bc5cfe 


f4fc5e72 1 


a 


9e8ffc 


1 5 


1 2cf00bec 


cffc5e72 1 


a 


9e902e 


1 3i 


1 8ec5052f 


5d025e72 | 


a 


9e9061 


1 5 


1 1074bl5e 


61825672 1 


a 


9e9095 


1 ^ 


1 gd5 9ede6 


2a425e72 | 


a 


9e90ca 


i ^ 


1 f0be7b24 


14c25e72 1 


a 


9e9100 


1 5 


1 lOelOddO 


C0225e72 | 


a 


9e9137 


1 ^ 


1 f5ad5ac2 


fb225e72 ) 


a 


9e916f 


1 ^ 


1 f7fba8f8 


7da2 5e72 | 


a 


9e91ad 


1 5 


1 2£490e5b 


c5625e72 | 


a 


9e91e2 


1 ^ 


1 94979982 


91e25e72 | 


a 


9e921d 


i 5 


1 26cda478 


2el25e72 | 


a 


9e9259 


1 ^ 


I aacb81dd 


26925e72 | 


a 


9e9296 


1 ^ 


1 b£ac7f5b 


da525e72 | 


a 


9e92d4 


1 ^ 


1 c9a7b0a7 


cad25e72 | 


a 


9e9313 


1 ^ 


1 cl42bdde 


32325e72 | 


a 


616cec 


1 5 


I 5a6a49l£ 


OdcdalSd | 


5 


616ceb 


1 5 


i 37db2de7 


bScdalSd | 


5 


616ce9 


1 S 


1 7d056ab7 


65cdal8d | 


5 


ei€ce6 


1 ^ 


1 d£61566a 


99cdal8d | 


5 


616ce2 


1 5 


1 6fb2£b63 


51cdal8d | 


5 


616cdd 


1 5 


1 472bf4S4 


2ecdal8d | 


5 


616cd7 


1 a 


1 c020eb21 


bacdalSd | 


5 


616cd0 


1 ^ 


1 a£918£d9 


02cdal8d | 


5 


616cc8 


1 ^ ■ 


1 9112£54f 


44cdal8d 1 


5 


616cbf 


1 5 


1 48db2a£l 


bf4dal8d | 


5 


616cb5 


1 ^ 


1 cf803584 


2b4dal8d | 


5 


616caa 


1 ^ 


1 9eb22bea 


d54dal8d | 


5 


616c9e 


1 ^ 


1 a49cb509 


9e4dal8d | 


5 


616C91 


1 5 


1 06£889d4 


624dal8d | 


5 


616c83 


1 ^ 


1 bf70ec37 


b04dal8d | 


5 


6iec74 


1 ^ 


1 ed3f797e 


8b8dal8d | 


5 


616c64 


1 5 


1 le695bcd 


898dal8d j 


5 


616C53 


1 ^ 


1 fb250cdf 


b2ddal8d | 


5 


6l6c41 


1 5 


1 42ad693c 


608dal8d | 


5 


616c2e 


1 ^ 


1 a5b7ccl4 


ddOdaldd { 


5 


6l6cla 


1 ^ 


1 9f9952f7 


960dal8d | 


5 


616c05 


1 ^ 


1 ceab4c99 


680daldd | 


5 


616bef 


t ^ 


1 d403ddde 


£d£5al8d | 


5 


616bd8 


1 5 


1 314£8acc 


c6f5al8d 1 


5 


6l6bc0 


1 5 


1 OfccfOSa 


80£Sal8d | 


5 


616ba7 


1 5 


1 25030d57 


7975al8d 1 


5 


616b8d 


1 ^ 


1 dba3037b 


6c75al8d | 


5 


616b72 


1 5 


1 4439cel7 


13b5al8d | 


5 
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Appendix IV -Sample Data 



Bluetooth. 



6ieb56 


1 ^ 


1 8d417247 


5ab5al8d | 


5 


6l6b39 


1 5 


1 6a5bd76f 


e735al8d | 


5 


616blb 


1 5 


1 592e8166 


b635al8d | 


5 


616afc 


1 5 


1 28609d46 


cfd5al8d 1 


5 


616adc 


1 5 


1 51cb8clf 


4ed5al8d j 


5 


616abb 


i 5 


1 7b047112 


b755alSd | 


5 


616a99 


1 5 


1 4871271b 


e655al8d | 


5 


616a76 


1 5 


1 24bdcSc4 


9b95al8d ] 


5 


616a52 


1 ^ 


1 edc57494 


d295al8d | 


5 


616a2d 


1 ^ 


1 f989f30f 


6dl5al8d | 


5 


616a07 


1 5 


1 0729fd23 


7815al8d 1 


5 


6169eO 


1 ^ 


1 8bfOba4f 


8le5al3d | 


5 


6169b8 


1 ^ 


1 89a64875 


0765al8d 1 


5 


61698f 


1 5 


1 6cealf67 


3c65al8d j 


5 


616965 


1 5 


1 2549d310 


29a5al8d | 


5 


61693a 


1 5 


1 48ae45d2 


1725al8d 1 


5 


61690e 


1 5 


1 7280db31 


5c25al8d j 


5 


6168el 


1 ^ 


1 celb9f34 


61c5al8d j 


5 


616db3 


1 5 


1 4b46727b 


7345al8d 1 


5 


€16834 


1 ^ 


1 ae0a2569 


4d45aldd 1 


5 


616854 


1 ^ 


j ea5fc581 


4a85al8d | 


5 


616823 


1 5 


1 33c61a3f 


bl05al8d j 


5 


6167fl 


1 ^ 


1 C49fb8c5 


63£9al8d j 


5 


6167be 


1 5 


1 5a2e0cb4 


5f79al8d | 


5 


61678a 


1 5 


j 60009257 


1479aldd 1 


5 


616755 


1 ^ 


1 86314e62 


eab9al8d j 


5 


61671f 


1 5 


1 3de£d9bb 


be39aldd | 


5 


6166e8 


1 ^ 


1 bff7e728 


c5d9al8d j 


5 


6166b0 


1 ^ 


1 bdall512 


4359al8d j 


5 


616677 


1 5 


1 6513b3bl 


£b99al8d j 


5 


61663d 


1 ^ 


1 decd2468 


afl9al8d | 


5 


616602 


1 ^ 


1 f6542b5f 


d019al8d 1 


5 


6165c6 


1 ^ 


1 dc44b49b 


d8e9aldd j 


5 


616589 


1 5 


1 42£500ea 


e469al8d j 


5 


61654b 


1 ^ 


1 b£2885el 


34a9al8d | 


5 


61650c 


1 ^ 


1 ec4c69b5 


4c29al8d 1 


5 
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Append. IV. sample Data BlUetOOth. 

4 HEC AND PACKET HEADER SAMPLE DATA 

Test vectors for HEC and header. Note that UAP, Data, and HEC are in hexa- 
decimal notation, while the header is in octal notation. The header is transmit- 
ted from left to right over air. 



UAP 


Data 


HEC 


Header 


toctal 


not . ) 


00 


123 


el 


770007 


007070 


000777 


47 


123 


06 


770007 


007007 


700000 


00 


124 


32 


007007 


007007 


007700 


47 


124 


dS 


007007 


007070 


707077 


00 


125 


5a 


707007 


007007 


077070 


47 


125 


bd 


707007 


007070 


777707 


00 


126 


e2 


077007 


007007 


000777 


47 


126 


05 


077007 


007070 


700000 


00 


127 


Sa 


777007 


007007 


070007 


47 


127 


6d 


777007 


007070 


770770 


00 


lib 


9e 


770770 


007007 


777007 


47 


lib 


79 


770770 


007070 


077770 


00 


11c 


4d 


007770 


007070 


770070 


47 


11c 


aa 


007770 


007007 


070707 


00 


lid 


25 


707770 


007070 


700700 


47 


lid 


c2 


707770 


007007 


000077 


00 


lie 


9d 


077770 


007070 


777007 


47 


lie 


7a ■ 


077770 


007007 


077770 


00 


llf 


f 5 


777770 


007070 


707777 


47 


llf 


12 


777770 


007007 


007000 
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5 CRC SAMPLE DATA 

Sample CRC generation 



data[0] = 0x4e 

data[l] = 0x01 

data [2] = 0x02 

data [3] = 0x03 

data [4] = 0x04 

data[53 = 0x05 

data [6] = 0x06 

data [7] ^ 0x07 

data [8] = 0x08 

data [9] « 0x09 

UAP = 0x47 



==> CRC = 6d d2 

Codeword (hexadecimal notation) 



4e 01 02 03 04 05 06 07 08 09 6d d2 



NB: Over air each byte in the codeword 
is sent with the LSB first. 
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6 COMPLETE SAMPLE PACKETS 



6.1 EXAMPLE OF DH1 PACKET 

Packet header: (MSB...L5B) 



AM_ADDR = Oil 
TYPE = 0100 (DHl) 
PLOW = 0 
ARQN = 1 
SEQN a 0 

Payload: (MSB...LSB) 



payload length: 5 bytes 

logical channel = 10 (UA/I, Start L2CAP message) 
flow = 1 

data byte 1 = 00000001 
data byte 2 = 00000010 
data byte 3 = 00000011 
data byte 4 = 00000100 
data byte 5 = 00000101 

HEC and CRC initialization: (MSB...LSB) 



uap = 01000111 
NO WHITENING USED 



AIR DATA (LSB. . .MSB} 
Packet header (incl HEC) : 



111111000 

000000111000 

000111000 

000111111000000000000000 



Payload (incl payload header and CRC) : 



01110100 
10000000 
01000000 
11000000 
00100000 
10100000 

1110110000110110 
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6.2 EXAMPLE OF DM1 PACKET 



Packet header: (MSB..,LSB) 



AM_ADDR ~ Oil 
TYPE * 0011 (DM1) 
FLOW = 0 
ARQN = 1 
SEQN = 0 

Pay load: (MSB, . .LSB) 



payload length: 5 bytes 

logical chairmel = 10 (UA/I, Start L2CAP message) 
flow = 1 

data byte 1 = 00000001 
data byte 2 = 00000010 
data byte 3 = 00000011 
data byte 4 * 00000100 
data byte 5 « 00000101 

HEC and CRC initialization: (MSB... LSB) 



uap = 01000111 
NO WHITENING USED 



AIR DATA (LSB, . .MSB) 
Packet header (incl HEC) : 



111111000 

111111000000 

000111000 

111000000111111111111000 

Payload (incl payload header, FEC2 3, CRC and 6 padded zeros) : 



0111010010 11001 
0000000100 01011 
0000110000 11110 
0000100000 00111 
1010000011 01100 
1011000011 00010 
0110000000 10001 



956 



29 November 1999 



Complete Sample Packets 



BLUETOOTH SPECIFICATION Version 1.0 B page 957 of 1082 

Appendix IV - Sample Data BlUBtOOtH 

7 WHITENING SEQUENCE SAMPLE DATA 

Whitening sequence generator. 



Whitening Whitening 
Sequence LFSR 
(=D7) D7 DO 



1 


1111111 


1 


1101111 


X 


1001111 


0 


oooriii 


0 


0011110 


0 


0111100 


1 


1111000 


1 


1100001 


1 


1010011 


0 


0110111 


1 


1101110 


1 


1001101 


0 


0001011 


0 


0010110 


0 


0101100 


1 


1011000 


0 


0100001 


1 


1000010 


0 


0010101 


0 


0101010 


1 


1010100 


0 


0111001 


1 


1110010 


1 


1110101 


1 


1111011 


1 


1100111 


1 


1011111 


0 


0101111 


I 


1011110 


0 


0101101 


1 


1011010 


0 


0100101 


1 


1001010 


0 


0000101 


0 


0001010 


0 


0010100 


0 


0101000 


1 


1010000 


0 


0110001 


1 


1100010 


1 


1010101 


0 


0111011 


1 


mono 
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1 


1111101 


1 


1101011 


1 


1000111 


0 


0011111 


0 


0111110 


1 


1111100 


1 


1101001 


. 1 


1000011 


0 


0010111 


0 


0101110 


1 


1011100 


0 


0101001 


1 


1010010 


0 


0110101 


1 


1101010 


1 


1000101 


0 


0011011 


0 


0110110 


1 


1101100 


1 


1001001 


0 


0000011 


0 


0000110 


0 


0001100 


0 


0011000 


0 


0110000 


1 


1100000 


1 


1010001 


0 


0110011 


1 


1100110 


1 


1011101 


0 


0101011 


1 


1010110 


0 


0111101 


1 


1111010 


1 


1100101 


1 


1011011 


0 


0100111 


1 


1001110 


0 


0001101 


0 


0011010 


0 


0110100 


1 


1101000 


1 


1000001 


0 


0010011 


0 


0100110 


1 


1001100 


0 


0001001 


0 


0010010 


0 


0100100 


1 


1001000 


0 


0000001 


0 


0000010 
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0 


0000100 


0 


0001000 


0 


0010000 


0 


0100000 


1 


loooooa 


0 


0010001 


0 


0100010 


1 


1000100 


0 


0011001 


0 


0110010 


1 


1100100 


1 


1011001 


0 


0100011 


1 


1000110 


0 


0011101 


0 


0111010 


1 


1110100 


1 


1111001 


1 


1100011 


1 


1010111 


0 


0111111 


1 


1111110 


1 


1101101 


1 


1001011 


0 


0000111 


0 


0001110 


0 


0011100 


0 


0111000 


1 


1110000 


1 


1110001 


1 


1110011 


1 


1110111 


1 


1111111 
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8 FEC SAMPLE DATA 

= ===== = = = = = ===3 = = = ========= = = = ======= = = === = = === = = 

Rate 2/3 PEC tl5,10) Shortened Hamming Code 



Data is in hexadecimal notation, the codewords are in binary notation. The codeword bits 
are sent from left to right over the air interface. The space in the codeword indicates 
the start of parity bits. 

Data: Codeword: 



0x001 1000000000 11010 

0x002 0100000000 01101 

0x004 0010000000 11100 

0x008 0001000000 OHIO 

0x010 0000100000 00111 

0x020 0000010000 11001 

0x040 0000001000 10110 

0x080 0000000100 01011 

0x100 OOOOOOOOlO 11111 

0x200 0000000001 10101 
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9 ENCRYPTION KEY SAMPLE DATA 



Explanation: 

Key [ i]: denotes the ith sub-key in Ar or A'n 
round r: denotes the input to the rth round; 
added ->: denotes the input to round 3 in 

A'r after adding original input (of round 1). 

9.1 FOUR TESTS OF E1 

rand : 00000000000000000000000000000000 
address : 000000000000 

key : 00000000000000000000000000000000 

round 1:00000000000000000000000000000000 

Key [ 1] :00000000000000000000000000000000 

Key [ 2J :4697blbaa3b7100ac537b3c95a28ac64 

round 2 : 78dl9f 9307d2476a523ec7a8a026042a 

Key [ 3] : ecabaac66795580df 89af 66e66dc053d 

Key [ 4] : 8ac3d8d96ae93 6494 3b£ebd4969b68aO 

round 3 : 60026S247668ddaOe81c07bbb30ed503 

Key t 5) : 5d57921fd5715cbb22clbe7bbc996394 

Key [ 6] : 2a61b83432 19f df bl740e6511d41448f 

round 4 :d7552ef 7cc9dbde568d80c2215bc4277 

Key [ 7] :dd0480dee731d67f01a2f739da6f23ca 

Key [ 8] :3ad01cdl303el2alcdOfe0a8af82592c 

round 5 : f bOSbef 32b52ab8f 2a4f 2b6ef 7f fidOcd 

Key [ 9] : 7dadb2ef c287ce75061302904f 2e7233 

Key [10] :c08dcfa981e2c4272f6c7a9f 52611538 

round 6 :b46b711ebb3cf 69e847a75f 0ab884bdd 

Key [11] :fc2042c708e409555e8cl47660ffdfd7 

Key [12] : f a0b21001af 9a6b9ea9e624cd99150d2 

round 7 :c585f 308f f 19404294f 06b292e978994 

Key [13] : 18b407a4ea5ba4c80ecb48694b4e9c35 

Key [14J :454d54e5253c0c4a8b3fcca7db6baef4 

round 8 : 2665f adbl3acf 952bf 74b4abl2264b9f 

Key [15] :2df37c6d9db52674f29353b0f011ed83 ^ 

Key [16] :b60316733ble8e70bd861b477e2456f 1 

Key [17] :884697blbaa3b7100ac537b3c95a28ac 

round 1 : 158££e433 5208Se8a5ec7a88elf £2ba8 

Key [ 1] :e9e5dfclb3a79583e9e5d£clb3a79583 

Key ( 2] :7595b£57e0632c59£435cl6697d4c864 

round 2 : 0b5cc75£ebcdf 7827ca29ec0901b6b5b 

Key [ 3] : e31b96af cc75d286e£0ae257cbbc05b7 

Key [ 4J :0d2a27b471bc010ac6263aff 9d9b3b6b 

round 3 : e4278526c8429211f 7f 2£0016220ae£4 

added - > : £lb68365f d6217£952de6a89831fd95c 

Key [ 5] : 98dleb5773c£59d75d3bl7b3bc37cl91 

Key [ 6] :£d2b79282408ddd4ea0aa7511133336£ 

round 4 : d0304adl8337f 86040145d27aa5c8153 

Key [ 7] :331227756638a41d57b0£7e071ee2a98 
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Key [ 8J : aa0dd8cc68b406533d0f ld64aabacf 20 
round 5 : 84db909d213bb0172b8b6aaf 71bf 1472 
Key t 9] :669291bO752e63f806fce76fl0ell9c8 
Key [10] :ef8bdd46be8ee0277e9b78adef lecl54 
round 6 : f 83 5f 52 921e903df a762f Idf 5abd7f 95 
Key [11] : f 3902eb06dc409cfd78384624964bf51 
Key [12] : 7d727*02b2 If 97 984a721c99b04982 3 9d 
round 7 : aeSc0b4bb09£2Sc6a5d9788a3 IbSOSdl 
Key [13] : 532e60bceaf 902c52aa6c2c2a3ecf a32 
Key [14] : 18171 SeSl 92efb2a6412 9668cf5d9dd4 
round 8 : 744a6235b86cc0b853cc9f 74f 6b65311 
Key [15] : 83017cl434342d4290e961578790f 451 
Key [16] : 26035 32f 3 65604646ff 658037 95ccce5 
Key [17] : 882f 7c90'7b565ea58daelc928a0dcf 41 
sres :056c0fe6 

aco :48afcdd4bd40fef76693bll3 

rand : bc3f 3 0689647c8d7c5a03ca80a91eceb 
address : 7ca89b233c2d 

key :159dd9f43fc3d328efba0cd8a861fa57 
round 1 :bc3f 30689647c8d7c5a03ca80a91eceb 
Key [ 1] :159dd9f43fc3d328efba0cd8a861fa57 
Key [ 2] :326558b3cl5551899a97790e65f f669e 
round 2 : 3e950edf 197615638ccl9c09f 8f edc9b 
Key [ 3] : 62e879b65b9f53bbfbd020c624bld682 
Key [ 4] :73415f 30bac8ab6lf410adc9442992db 
round 3 : 6a76407 91cb53 6678936c5ecd4ae5a73 
Key [ 5] : 5093cf ald31clc48acd76df 030ea3c31 
Key [ 6] : 0b4acc2b8f If 694f c7bd91f 4a70f 3009 
round 4 : f ca2c022a577e2f fb2aa007589693ec7 
Key [ 7] :2ca43fc8179478O4ecffl48dS0d6f6c6 
Key [ 8] :3fcd73524b533e00b7f7825bea2040a4 
round 5 : e97f 8ea4edla6f 4a36f f Cl79dc6bb563 
Key [ 9] :6c67bec76ae8c8cc4d289f69436d3S06 
Key [10] :95ed95ee8cb97e6id75848464bffb379 
round S : 38b07261d7340d028749del773a415c7 
Key [11] :f f 566clfc6b9da9ac502514550f3e9d2 
Key [12] : ab5ce3f 5c887d0f 49b87e0d380el2f 47 
round 7 : 58241f Iaed7clc3e047d7243 3 Ia0b774 
Key [13] :a2cab6f 95eac7d655dbe84a6cd4c47f S 
Key [14] :f 5caf fSSaf Oaf 8c42a20b5bbd2c8b460 
round 8 : 3dlaaef f S3c0910de63b9788bl3c490f 
Key [15] : 18509 9cll31cf97001e2f36fda415025 
Key [16] : a0ebb82676bc75e83 78bl89ef f 3f 6bld 
Key [17] :cf 5b34aaaee27ae332b4f lbfal02S9a6 
round 1 :2e4b417b9a2a9cfd7d8417d9a6a556eb 
Key [ 1] :fe78b835f26468ab069fd3991b086fda 
Key [ 2] :095c5a51c6fa6d3acld57fal9aa382bd 
round 2 :b8bca81d6bb45af 9d92beadd9300f 5ed 
Key [ 3] : laf 866df 817f d9f 4ec00bc704192cf f c 
Key [ 4] : f4a8a059clf575f076f5fbb24bf 16590 
round 3 : 3 51aal6dec2c3a4787080249ed323eae 
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added ->:lb6 5e2167656d6bafaacl9904bd79445 
Key [ 5] :8c9diad9356a9954d341b428€e88eal£ 
Key ( 6] :5c958d370102c9S81bf753e69c7da029 
round 4 : 2ce8f e£47dda6a5bee74372e3 3e478a2 
Key [ 7J :7eb2985c3697429fbe0da334bb51f795 
Key [ 8] :af900f4b63all38e2874bfb7c628b7b8 
round 5 : 572 787f 563el643clc862b755 5637f b4 
Key [ 9] :834cS588dd8f 3d4f 31117a488420dS9b 
Key [10] :bc2b9b8lcl5d9aa0262f3f48e9045895 
round 6 : 16b4968cSd02853c3a43aa4cdb5f 26ac 
Key [11] :f08608c9e39ad3147cba61327919c958 
Key [12] :2d4131decf4fa3a959084714a9e85cll 
round 7 : 10e4120c7cccef 9dd4ba4e6da857lb01 
Key [13] :c934fd319c4a2b5361fa8eef05ae9572 
Key [14] :4904cl7aa47868e40471007cde3a97c0 
round 8 : f 9081772498f ed41b6f f d72b71f cf 6c6 
Key [15] : ea5e28687e97f a3 f 83 3401ca6e6053ef 
Key [16] : 1168f 58252c4ecf ccaf bdb3af 857b9f 2 
Key [17] :b3440f69ef 951b78b5cbd6866275301b 
sres :8d5205c5 

aco :3ed75df4abd9a£638dl44e94 
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rand : 0891caee063f 5dal809577f f 94ccdcf b 
address :c62f 19f 6ce98 

key :452 98d06e46bac21421ddfbed94c032b 

round 1 : 0891caee063f 5dal809577f f 94ccdcf b 
Key [ 1] :45298d06e46bac21421ddfbed94c032b 
Key [ 2] : 8f 03elelf elcl91cad35a897bc400597 
round 2 : Ic6ca013480a685clb28e0317f 7167el 
Key [ 3] : 4£2ce3a092dde854ef 49€c8126a69e8e 
Key t 4] :968caee2ac6d7008c07283daec67f2f 2 
round 3 : 06b4915f 5f cclf c551a52048f Oaf 8a26 
Key [ 5] :ab0d5c3l£94259a6b£85ee2d22edf 56c 
Key [ 6] :dfb74855c0085ce73dcl7b84bfd50a92 
round 4 : 077a92b040acc86e6e0a877dbl97al67 
Key [ 7] :8£888952662b3db00d4e904e7ea53b5d 
Key [ 8] :5el8b£cc07799b0132db88cd6042f 599 
round 5 : 7204a81f b300914825£dc863e8ceadf 3 
Key [ 9] :b£ca91ad9bd3dla06c5a2bld5512dddf 
Key [10] :a88bc477e3£ald5a59b5e6c£793c7a41 
round 6 :27031131d86cea2d747deb4f 756143aa 
Key [11] :£3cfb8dac8aea2a6a8e£95a£3a2a2767 
Key [12] : 77beb90670c5300b03aa2b2232d3d40c 
round 7 : £c8cl3d49149blce8d86£96e44a00065 
Key [13] : b578373650af 36a06el9f e335d726d32 
Key [14] :6bcee918c7d0d24d£d£42237£cf 99d53 
round 8 : 04e£5f 5a7ddf 846cda0a07782£c23866 
Key [15] :399£l58241eb3e079f45d7b96490e7ea 
Key [16] :lbc£be98ecde2add52aa63ea79£b917a 
Key [17] :ee8bc03ec08722bc2b075492873374a£ 
round 1 : d989d7a40cde7032dl7b52£8117b69d5 
Key [ 1] :2ecc6cc797cc41a2ab02007£6af 396ae 
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Key t 2] :acfaef 7609cl2567d537aelcf 9dc219a 
round 2 : 8e76eb9a2 9b2ad5eea790db97aee3 7cl 
Key t 3] :079c8f f 9b73d428df 879906a0b87a6c8 
Key E 4] :19f2710baf403a494X93d201f 3a8c439 
round 3 : 346bb7c35b253 9676375aaf e3af 69089 
added -> :edf 48667 5 70 3ag55b2f Of c062b7if9Sc 
Key [ 5] :d623a6498f 915cb2c8002765247b2f5a 
Key [ 6] :900109093319bc30108b3d9434a77a72 
round 4 : f afb6clf 3ebbd2477be2da49dd923f 69 
Key t 7] :e28e2ee6e72e7f 4e5b5cllf 10d204228 
Key [ 81 : 8e455cdll f 8b9073a2df a5413c7a4bc5 
round 5 : 7c722 30df 58a0 60a3cf 92 0f 9b0a08f 06 
Key [ 9] :28afb26e2c7a64238c41cefcl6c53e74 
Key [10] :d08dcafc2096395ba0d2dddd0e471f4d 
round 6 : 55991df 991db26f f 00073al2baa3031d 
Key [11] :fcffdcc3ad8faaea91a7055b934f87cl 
Key [12] :f 8df082d77060252c02d91e55bd6a7d6 
round 7 : 70ec682f f 8643 75f 63701f a4f 6be5377 
Key [13] :bef 3706e523d708e8a44147d7508bc35 
Key [14] :3e98ab2a3ca2422d56a56cf8b06caeb3 
round 8 : 172f 12ec933da85504b4ea5c90f 8f Oea 
Key [15] : 87ad9625d0664 5d22 598dd5ef 811ea2c 
Key [16] : 8bd3db0cc8168009e5da90877el3a36f 
Key [17] : 0e74631d813a8351ac7039b348c41b42 
sres :00507e5f 

aco :2a5f 19fbf 60907e69f 39ca9f 
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rand : 0ecd61782b4128480c05dc45542blb8c 
address : f 426£0e624b3 

key : 35949a914225fabad91995d226deld92 

round 1 : 0ecd61782b412 8480c05dc45542blb8c 
Key [ 1] : 35949a91422Sfcibad91995d226deld92 
Key [ 2] : ea6b3dcccc8ee5d88de349f a5010404f 
round 2 : 8935e2e263fbc4b93 02cabdf c06bce3e 
Key [ 3] : 920f3aOf2543ceS35d4e7f25ad80648a 
Key [ 4] : ad47227edf 9c6874e80ba80ebb95d2c9 
round 3 :b4c8b878675f 184a0c72f 3deib51f 8f 05 
Key ( 5] :81a941ca7202b5e884ae8fa493ecac3d 
Key [ 6] :bcdel520bee3660e86ce2f0fb78b9157 
round 4 : 77ced9f 2f c42bddSc6312b87f c2377c5 
Key [ 7J :c8eee7423d7c6efa75ecec0d2cd969d3 
Key t 8] :910b3f838a02ed441fbe863a02b4ald0 
round 5 : f e28e8056f 3004d60bb207e62 8b39cf 2 
Key [ 9] :56c647cle865eb078348962ae070972d 
Key [10] :883965da77ca5812d8104e2b640aec0d 
round 6 : If 2ba9225 9d9e88101518f 145a33340f 
Key [11] :61d4cb7e4f8868a283327806a9bd8d4d 
Key [12] : 9f 57de3a3 f f 310e21dcle696ce060304 
round 7 : cc9b5d02ied29037e8847S152ebebb2f 
Key [13] : 7aald8adclaeed712 7ef 9al8f 6eb2d8e 
Key [14] :b4db9da3bf86S912acdl4904c7f7785d 
round 8 :b04d352bedc02682e4a7f 59d7cdaldba 
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Key [15J :al3d7l41eflf 6c7d867e3dl7S467381b 
Key [16] : 08b2bc058e50d6l41cdd566a307elacc 
Key [17j :057b2b4b4be5dc0ac49e5048gb8006c9 
round 1 : 5cf acc773bae995cd7f Ib81e7c9ec7df 
Key [ 1] : Ie717950f5828f3930fe4a9395858815 
Key I 2J :dl623369b733d98bbc894f75866c544c 
round 2 :d571f f a21d9daa797blaOa3c962f c64c 
Key t 3] : 4abf 27664ae364cc8a7e5bcf 88214cc4 
Key [ 4j : 2aaedda8dc493 3dd6aea£6e5c0d5a4d2 
round 3 : el7c8e498a00f 125bf 654c938c23f 36d 
added - > :bd765a3eblae8a796856048d£0clbab2 
Key [ 5] :bc7f aab2d86000f 47bl946cc8d7a7a2b 
Key t 6] :€b28544cbl3ec6c5d98470df2cf 900b7 
round 4 : a9727c2 6f 2f 06bd9920e83c8605dcd76 
Key [ 7] :lbe840d9107f2c9S23f66bbX9f5464al 
Key [ 8] :61d6fblaa2fOc2b26fb2a3d6deacl77c 
round 5 :aef f 751f 146eab7e4626b2e2c9e2£b39 
Key [ 9] :adabfc82570c568a233173099f23f4c2 
Key [10] :b7df6b55ad266c0flff7452101f59101 
round 6 : cf 412b9 5f 454d5185e67ca671892e5bd 
Key [11] :8e04a7282a2950dcbaea28f300e22de3 
Key [12] : 213 62cll4433 e2 9bda3e4d51f 803b0cf 
round 7 : 16165722f e4e07ef 88f 80 56bl7d89567 
Key [13] :710c8fd5bb3cbbSfl32a7061de518bd9 
Key [14] :0791de7334f4c87285809343f 3ead3bd 
round 8 :28854cd6ad4a3c572bl5490d4b81bc3f 
Key [15] : 4f 47f 0e5629a674bf cdl3770eb3a3bd9 
Key [16] : 5aa6d9al6a284cc0aead2126c79608al 
Key [17] :a564082a0a98399f43f 535fd5cefad34 
sres :80e5629c 
aco :a6fe4dcde3924611d3cc6bal 



address 


:000000000000 


round 


1 


: 00000000000000000000000000000000 


Key [ 


1] 


: 00000000000000000000000000000006 


Key [ 


2] 


:4 697blbaa3b7100ac537b3c95a28dc94 


round 


2 


: 98611 307ab76bbde9a86aflce8cad412 


Key [ 


3] 


:ecabaac66795580df 89af 66e665dd63d 


Key [ 


4] 


.8ac3d8896ae93 6494 3bfebd4a2a768a0 


round 


3 


820999ad2e6618£4bS78974beeed£9e7 


added 


- > 


820999ad2e6618f4b578974beeedf 9e7 


Key [ 


5] 


5d57921fd5.715cbb22clbedblc996394 


Key t 


6] 


2a61b8343219£d£bl740e9541d41448£ 


round 


4 


acd6edec87 58lac22dbdc64ea4ced3a2 


Key [ 


7] 


dd0480dee731d67f01ba0f 39da6£23ca 


Key [ 


8] 


3ad01cdl303el2al8dc£e0a8af 82592c 
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round 5 : lc7798732f 09f bf e2 5795a4a2fbc9 3c2 
Key [ 9J : 7dadb2ef C2a7ce7b0cl302904f 2e7233 
Key [10] :c08dcfa9aie2f 4572f 6c7a9f52ell538 
round 6 : C05b88b56aa70e9c4 0c79bb81cd911bd 
Key [11] :f C2042c708658a555e8cl47660f fdfd7 
Key [12] :f a0b21002605a6b9e89e624cd99150d2 
round 7 : abacc71b481c84c798dlbdf 3d62f 7e20 
Key [13] : 18b407e44a5ba4c80ecb48694b4e9c3 5 
Key [14] : 4 54d57e82 53cOc4aab3f cca7db6baef 4 
round 8 : e8204ell83ae85cf 19edb2c86215b700 
Key [15] : 2d0b946d9db52674f 29353b0f 011ed83 
Key [16] :76c316733ble8e70bd861b477e2456f 1 
Key [17] :8e4697blbaa3b71O0ac537b3c95a28ac 
Ka :dl4ca028545ec262cee700e39b5c3 9ee 



Bluetooth. 



rand : 2dd9a5503 43191304 013b2d7ell89d09 
address : cac4364303b6 

round 1 :cac4364303b6cac4364303b6cac43643 
Key [ 1] :2dd9a550343191304013b2d7ell89d0f 
Key [ 2] :14c4335b2c43910c5dcc71d81al4242b 
round 2 : el69f 788aad45a9011f Ildb5270bl277 
Key [ 3] :55bfb712cbal68dla48f6e74cd9f4388 
Key [ 4] : 2a2b3aacca695caef 2821b0f b48cc253 
round 3 ; 540f 9c76652e92c44987c617035037bf 
added - > : 9ed3d23566e45cO07f cac9alc9146df c 
Key [ 5] : a06aab22d9a287384042976b4b6b00ee 
Key [ 6] :c229d054bb72e8eb230e6dcdb32dl6b7 
round 4 : 83659a41675f 7171ea57909dc5a79ab4 
Key [ 7] : 2 3c4812abl905ddf 77dedaed4105649a 
Key [ 8] :40d87e272a7al554ae2e85e3638cdf52 
round 5 : 0b9382d0ed4f 2 f ccdbb69dOdb7bl3 0a4 
Key [ 9] : bdc064c6a3 9f 6b84f e40db359f 62a3c4 
Key [10] :58228db841ce3cee983aa721f 36aalb9 
round 6 : c6ebda0f 8f 489792f 09cl89568226clf 
Key [11] :a815bacd6fa747a0d4f 52883ac63ebe7 
Key [12J :a9ce513b38ea006c333ecaaefcfld0f8 
round 7 : 75a8abaO7e69c9O65bcd831c40115116 
Key [13] : 3 63 5e074792d4122130e5b824e52cd60 
Key [14] : 511bdb61bb28de72a5d794bf f bf 407df 
round 8 : 57a6e279dcb764cf 7dd6a749dd60c735 
Key [15] : a32£5f 21044b6744b6d913bl3cdb4c0a 
Key [16] : 9722bbaee£2dl496e£8c2 3a9d41e92£4 
Key [17] :807370560ad7e8al3a054a65a03b4049 
Ka :e€2£8bac60913 9b3999aedbc9d228042 



rand :dab3cf f e9d573 9dlb7bf 4a667ae5ee24 
address : 02£8£d4cd661 

round 1 : 02f 8£d4cd66102f 8£d4cd66102f a£d4c 
Key [ 1] :dab3c£fe9d573 9dlb7bf4a667ae5ee22 
Key [ 2] :e315a8a6Sd809ec7c2a9e69c899fbdcc 
round 2 : e£S5f £081b8709405el9£3e27Scec7dc 
Key [ 3] :df6all9bb50945£c8a3394e721644af 3 
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Key [ 4] :87fe86fb0d58b5ddOfb3b6bldabSld07 
round 3 : aa2Sc21bf 577d92dd97381e3e9edcc54 
added - > : aSldbf 5723d8dbd524bf 5782ebe5c918 
Key [ 5] ; 36cc253c506c0021c91fac9d8c469e90 
Key [ 6] :d5fda00fll3e303809b7f 7d78ala2b0e 
round 4 : 9e69ce9b53caec3990894d2baed41e0d 
Key t 7 J :cl4b5edcl0cabfl6bc2a2ba4a8aele40 
Key t 8) :74c6131afc8dce7ellb03blea8610cl6 
round 5 : a5460f a8cedca48al4f d02209e01£02e 
Key [ 9] : 346cfc553c6cbc9713edb55f4dcbc96c 
Key [10] :bddf027cb059d58f 0509f 8963e9bdec6 
round 6 : 92b33f Ileadcacc5a43dd05f 13d334dd 
Key [llj :8eb9e040c36c4c0b4a7fd3dd354d53c4 
Key [12] : c6f f ecdd5el35b20879b9df a4b34bf 51 
round 7 : f b0541aa5e5df laSlcSlaef 606eb5a41 
Key [13] : bf 12f 5a6ba08df c4 f da4bdf c68c997d9 
Key [14] : 37c4656b9215f 3c9 59ea688f b64ad327 
round 8 : f 0bbd2b94ae374346730581f c77a9c98 
Key [15] :e87bb0d86bf421ea4f779a8eee3a866c 
Key [16] : f aa471e934f d415ae4c0113ec7f OaSad 
Key [17] :95204a80b8400e49db7cf 6fd2fd40d9a 
Ka :b03 76d0a9b33 8c2el3 3c3 2b69cb816b3 



Bluetooth. 



rand : 13ecad08ad63c37f 8a54dc56e82f 4dcl 
address : 984€c5ead4d9 

round 1 : 9d46c5ead4d99846cSead4d99846c5ea 
Key [ 1] :13ecad08ad63c37f 8a54dc56e82f4dc7 
Key [ 2) :ad04f 127bed50b5e671d6510d392eaed 
round 2 : 97374el8cdd0a6£7a5aa49dlac875c84 
Key [ 3] :57adl59eS774fa222f2f 3039b9cd5101 
Key ( 4] : 9ale9el068fede02ef 90496e25fd8e79 
round 3 : 9dd3260373edd9d5f 4e774826b88f d2d 
added ->:0519ebe9a7c67193 31dl485bf 3cec2c7 
Key [ 5] : 378dcel67db62920b0b392f 7cf ca316e 
Key ( 6J :db4277795ca7286faee6c9e9a6b71a93 
round 4 : 40ec6563450299ac4el20d88672504d6 
Key [ 7] :ec01aa2f5a8a793b36clbb858d254380 
Key [ 8] :2921a66c£a5bf 74ac535424564830e98 
round 5 : 57287bbb041bd6aS6c2bd931ed410cd4 
Key [ 9] : 07018e4Saab61b3c3726ee3d57dbd5f 6 
Key (10) :627361f0fa4c02b0c7d3e7dfbffc3333 
round 6 :66af fa66a8dcd36e36bf 6c3f Ic6a276e 
Key [11] :33b57c925bd5551999f716el38efbe79 
Key [12] :a6dc7f 9aa95bcc9243aebdl2608£€57a 
round 7 : 450e65184f d8c72c578dScdecb286743 
Key (13] :a6a6db00f d8c72a28ea57ea542f 6el02 
Key [14] :dcf 3377daeb2e24e61f0ad6620951clf 
round 8 :e5ebl80b519a4e673f 21b7c4f 4573f 3d 
Key [15] : 621240b9506b462a7£a250da41844626 
Key [16] :ae297810f Olf 43dc35756cdll9ee73d6 
Key [17] :b959835ec2501ad3894f8b8f lf4257f 9 
Ka :5b61ea3ad04d23e9dlc698851fa30447 
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Bluetooth. 



9,3 THREE TESTS OF E22 

(for K_master and overlay generation) 



rand : 001del69248850245a5f 7cc7f 0d6d63 3 



round 1 : 001del69248850245a5f 7cc7f 0d6d623 
Key [ 1] :d5a51083a04al971f 18649ea8b79311a 
Key t 2] :7317cdbf f 57f 9b99f 9810a2525bl7cc7 
round 2 : 5f 05cl43 347b5 9acae3cb002db2 3830f 
Key [ 3] :f 08bd258adfld4ae4a54d8ccb26220b2 
Key t 4] :91046cbb4ccc43dbl8d6dd36ca7313eb 
round 3 : c8f 3e3300541a25b6ac5a80c3105f 3c4 
added -> : c810c45921c9f 27f 302424cbcldbc9e7 
Key [ 5] :67fb2336f 4d9f 069da58dllc82f6bd95 
Key [ 6] :4fed702c75bd72c0d3d8f 38707134C50 
round 4 : bd5e0c3a97f a55b91a3bbbf 306ebb978 
Key [ 7] :41c947f80cdc0464c50aa89070af314c 
Key [ 8J :680eecfa8daf41c7109c9a5cblf26d75 
round 5 : 21cla762c3cc33e75ce8976a7 3983087 
Key I 9] :6e33fbd94d00f f8f72e8a7aOd2cebc4c 
Key [10] : f 4d726054c6b948add99f abb5733ddc3 
round 6 : 56d0df 484345582f 6b574a449bal55eb 
Key [11] :4eda2425546a24cac790f 49ef 2453b53 
Key [12] : cf 2213624edl510408a5a3e00b7333df 
round 7 : 120cf 9963f e9f f 22 9 93f 7f df 9600d9b8 
Key [13] : d04bla25b0b8f ec946d5ecf a626d04c9 
Key [14] :01e5611b0f0el40bdb64585fd3ae5269 
round 8:a6337400ad8cb47f efb91332f 5cb2713 
Key (15] : f 15b2dc43 3f 534f 61bf 718770a3 698bl 
Key [16] :f 990d0273d8ea2b9e0b45917a7aic720 
Key [17] :f41b3ccl3d4301297bb6bdfcb3e5*aldd 
Ka :539e4f2732e5ae2dele0401f0813bd0d 



rand 




:67ed56bfcf99825f0c6b349369da30ab 


PIN 




:7885b515e84blf082cc49 9976£l725ce 


round 


1 


:67ed56bfcf 99825f0c6b34936 9da3 0bb 


Key [ 


1] 


:7885b515e84blf082cc499976fl72 5ce 


Key [ 


2] 


:72445901fda£506beb036f 4412512248 


round 


2 


:6bl6ab66al£6c26cl£3432f46 3ef 5aal 


Key [ 


3] 


:5 9f0e4982e97633eSe7fdl33af8f2c5b 


Key [ 


4] 


:b4946ec77a41bf 7c729dl91e3 3d458cib 


round 


3 


•3f22046c964c3eSca2a26ec9a76a9f67 


added 


- > 


5 80f5ad3 5 9e5c003ae0da2 5ace44cfdc 


Key [ 


5] 


eb0b83 9f97bdf 53418321 0678520bbef 


Key [ 


6] 


cf f0bc4a94e5c8b2a2d24d9f5 9031el9 


round 


4 


87aa61fc0ff88e744cl95249b9a33 632 


Key [ 


7] 


5 9243 0fl4d8f 93db95dd6 91af 045776d 


Key [ 


8] 


3b55b4042 22bf445a6a2ef 586 5247695 


round 


5 


83dcf 592a854226c4dcd94elecflbc75 



PIN 



dSa51083a04al971f 1864 9ea8b79311a 
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Key [ 9] :a9714b86319ef 343a28b87456416bd52 
Key [10] :e6598b24390b3a0bf2982747993b0d78 
round 6 : dee0dl3a52e96bcf 7c72045a21609f c6 
Key [11] :62051d8cS1973073bf f 9S9b032c6ele2 
Key [12] :29e94f4ab73296c453c833e217ala85b 
round 7 : 084 88005761e6c7c4dbb2 03ae453f e3a 
Key [13] : 0e2 55970b3e2f c235f 59f cSacblOeSce 
Key [14] :d0dfbb3 361fee6d4ffe45babf lcd7abf 
round 8 : 0d8 le8 9bddde7a70 6 5 3 16c475 74 f eb8 f 
Key [15] : Cl2eee4eb38b7al71f Of 7 3600 3774b40 
Key [IS] :8f962523flc0abd9a087a0dfbll643d3 
Key [17] :24belc66cf8b022f 12flfb4c60c93fdl 
Ka : 0443577le03a9daceb8bbla493ee9bd8 



Bluetooth. 



rand : 40a94509238664f 244££8e3dl3bll9d3 
PIN :lce44839badde30396d03c4c36f23006 
round 1 : 40a94S09238664f 244f f 8e3dl3bll9c3 
Key [ 1] :lce44839badde30396d03c4c36f2300S 
Key [ 2] :6dd97a8f91d628be4bl8157af la9dcba 
round 2 : 0eac5288057d9947a24eabcl744c4582 
Key ( 3] :fef 9583d5f 55fd4107ad832a725db744 
Key [ 4] :fc3893507016d7cldb2bd034a230a069 
round 3 : 60b424f 1082b0cc3bd61be7b4c0155f 0 
added - >:205d69f 82bbl7031f 9604c465fb26e3 3 
Key ( 5] : 0834d04f 3e7elf 7f 85f Ocldb685abll8 
Key [ 6] :1852397f9a3723169058e9b62bb3682b 
round 4 : 2c6b65a49d66af 6566675af dd6f a7d7d 
Key [ 7] :6cl0da21d762ae4aclba22a96d9007b4 
Key [ 8] :9aa23658b9O470a78d686344bSa9b0e7 
round 5 : a2c537899665113a42f Iac24773bdc31 
Key [ 9] :137dee3bf879fe7bd02fe6da88e84fl6 
Key [10] :466e315al863f47d0f 93bc6827cf3450 
round 6 : e26982980d79b21ed3e20f 8c3e71ba96 
Key [11] :0b33cf831465bb5c979e6224d7f79f7c 
Key [12] : 92770660268ede827810d707a0977d73 
round 7 : e7b063c4e2e3110b89b7el631c762dd5 
Key [13] : 7be30ae4961cf 24cal7625a77bb7a9f 8 
Key [14] :be65574a33ae30e6e82dbd2826d3ccla 
round 8 : 7a963e37b2c2e76b489cf e40a2cf OOeS 
Key [15] : ed0ba7dd30d60a5e69225£0a3 301le5b 
Key [16] :765c990f4445e52b39e6ed610Sadlc4f 
Key [17] :52627bf 9f35d94f30d5b07efl5901adc 
Ka : 9cde4b60f 9b5861ed9df 80858bac6£7£ 
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9.4 TESTS OF E22 WITH PIN AUGMENTING 

for PIN lengths 1,..., 16 bytes 

rand : 2 4bl01f d5 6ll7d42c0545a424 73 57048 
PIN length =16 octets 

PIN : f d397c7f Self 937cdf S2d8816cc377e2 

round 1 : 24bl01f d56117d42c0545a4247357058 
Key [ 1] :fd397c7f5clf937cdf82d8816cc377e2 
Key [ 2] :0f7aac9c9b53f 308d9fdbf2c78e3c30e 
round 2 : 838edf el226266953ccba8379d873107 
Key [ 3] :0b8acl8d4bb44fad2efall5e43945abc 
Key [ 4] :887bl6b062a83bfa469772c25b456312 
round 3 : 8cdOc9283120aba89a7f 9d635dd4f e3f 
added - > : a881cad567312 8ea5ad3f 7211a096e67 
Key t 5] : 2248cbe6d2 99e9d3e8f d3 5a91178f 65b 
Key [ 6] : b92af 6237385bd31f 8fbS7fblbdd824e 
round 4 : 2648d9c618a622bl0ef 80c4dbaf 68b99 
Key t 7] :2bf 5f fe84a37878ede2d4c30be60203b 
Key [ 8] : C9cb6cec60cb8a8f 2 9b99f cf 3 e71e40f 
round 5 :b5a7d9e96f 68bl4ccebf 3 61de3914d0f 
Key t 9] ; 5c2f 8a702e4a45575bl03b0cceBa91c6 
Key [10] :d453db0c9f 9ddbdlle355d9a34d9bllb 
round 6 : 632a091e7eef el336857ddaf dlf f 3265 
Key [11] :32805db7e59c5ed4acabf 38d27e3fece 
Key [12] : f de3aSeedf a3al2be09cla8a00890f d7 
round 7 : 04853 le9f d3ef a95910540150f 8bl37b 
Key [13] : def 07eb23 f 3a3 78f 0 5903 9a2124bc4c2 
Key [14] :2608c58f23d84a09b9ce95e5caaclab4 
round 8 : 461814ec743 9d412d0732 f 0a6f 799a6a 
Key [15] : 0a7edl6481a623e56eel442f f a74f 334 
Key [16] :12add59aca0dl9532fl516979954e369 
Key [17] :dd43d02d3 9ffd6a386a4b98b4ac6eb23 
Ka :a5f 2ad£328e4e6a2b42£l9c8b74ba884 



rand : 321964061ac49a436f 9fb9824ac63f 8b 
PIN length =15 octets 

PIN :ad955d58b6b8aS7820acl262d617a6 
address : 0314c0642543 

round 1 : 321964061ac49a436f 9fb9824ac63f 9b 
Key [ 1] :ad955d58b6b8857820acl262d617a603 
Key t 2] :f28l736f68e3d30b2ac7c67fl25dc416 
round 2 : 7c4a4ecel398681f 4baf d309328b7770 
Key [ 3] :43cl57f4c8b360387c32ab330f9c9aa8 
Key t 4] :3a3049945a298f6d076cl9219c47c3cb 
round 3 : 9672bO0738bdf af 9bd92a855bc6f 3afb 
added ->:a48bl4ai22B194bad23161d7f 63 57960 
Key [ 5] :c8e2eaa6d73b7del8£3228ab2173bc69 
Key [ 6] :8623f44488222e66a293677cf 30bf2bb 
round 4 : 9b30247aad3bf 133712d034b46d21c68 
Key [ 7] :f 3e500902fba31db9bae50ef 30e484a4 
Key [ 8] :49d4bll37clSf 4752dd9955a5a8d2f43 
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round 5 : 4492c25f da08083a768b4b5588966b23 
Key t 9] : 9d59c451989e74785cc097eda7e42ab8 
Key [10] :251de25f 3917dcd9,9cl8S46107a641fb 
round 6 :21ae34663 5714d2623041f 269 978c0ee 
Key [11] :80b8f78cbla49ecOc3e32a238e60fddf 
Key [12] : beb84f 4d20a501e4a24ecf bde481902b 
round 7 : 9b56a3d0f 8932f 20c6a77a229 514f bOO 
Key [13] :852571b44f35fd9d9336d3cld25066S6 
Key [14] :d0a0d510£b06ba76e69b8ee3ebclb725 
round 8 : 6cd84g2b2£d31a86978bcdf 644eb08a8 
Key [15] : c7f f d523f 32a874ed4a93430a25976de 
Key [16] : 16cdcb25e62964876d951f dcc07030d3 
Key [17] :def 32c0el2596f 9582e5e3c52b303f52 
Ka : C0ecla5694e2b4ad54297911e6c98b8f 



Bluetooth. 



rand : d4ae20c80094 547d7051931b5cc2a8d6 
PIN length =14 octets 

PIN :el2 32e2c5f 3b833b3309088a87b6 

address : £aJ3ecc58e609 

round 1 : d4ae20c80094547d7051931b5cc2a8c6 
Key [ 1] :el232e2c5f 3b833b3309088a87b6fabe 
Key [ 2] : 5f0812b47cd3e9a30d7707050f f f alf2 
round 2 : If 45f 16be89794bef 33e4547c9c0916a 
Key [ 3] :77b681944763244f fa3cd71b248b79b5 
Key [ 4] : e2814e90e04£4a5958ceS8c9133e2be€ 
round 3 :bl0d2f 4ac941035263cee3552d774d2f 
added - > : 65bb4f 82c9d5572f 131f 764e7139f 5e9 
Key [ 5] : 520acad20801dc63 9a2c6d66d9b79576 
Key t 6] : C72255cdb61d42be72bd45390dd25ba5 
round 4 : ead4dc34207b6ea721c62166el55aaad 
Key [ 7] :ebf 04c02075bf459ec9c3ec06627d347 
Key [ 8] :al363dd2dl2ee800a4491c0c74074493 
round 5 : f 507944f 3018e20586d81d7f 326aae9d 
Key [ 9] :b0b6ba79493dc833d7t425be7b8dadb6 
Key [10] :OScd23e536b9b9b53e8Seb004cba3111 
round 6 : f f f 450f 4302a2b3571e8405el48346da 
Key [11] :fec22374c6937dcd26171f4d2edfada3 
Key [12] :0fla8ef 5979c69ff 44f620c2e007b6e4 
round 7 :de558779589897f 3402a90ee78c3f 921 
Key [13] :901fb66f0779d6aad0c0fbalfeai2cb5 
Key [14] : a0cab3cdl5cd23603adc8d4474efb239 
round 8 :b2df 0aa0c9f 07f bbaa02f 510a29cf 540 
Key [15] : 18edc3f 4296dd6f ldeal3 f 7cl43117al 
Key [16] : 8d3d52d700a379d72ded81687f 7546c7 
Key [17] :5927badfe602f29345f840bb53eldea6 
Ka :d7b39bel3e36 92c6 5b4a9el7a9c55el7 



rand : 272b73a2e40db52a6a61c6520549794a 
PIN length =13 octets 
PIN :549f2694f 353f5145772d8aele 

address : 2048768leb9f 

round 1 : 272b73a2e40db52a6a61c6520549795a 



Encryption Key Sample Data 



29 November 1999 



971 



BLUETOOTH SPECIFICATION Version 1.0 B 



page 972 of 1082 



Appendix IV - Sample Data 

Key t 1] : 549f2694f 353f 5145772d8aele204876 
Key [ 2] :42c855593d66b0c458fd28b95b6a5fbf 
round 2 : d7276dc8073f 7677c31f 855bde9501e2 
Key [ 3] : 75d0a69ae49a2da92e457d767879df 52 
Key [ 4] : b3aa7e7492971af aaOf b2b64827110df 
round 3 : 71aae503331133dl9bc452da4d0e409b 
added -> : 56d558al671ee8fbf 12518884857b9cl 
Key t 5] : 9c8cf I604a98e9a503c342e272de5cf6 
Key [ 6] :d35bc2df6b85540a27642106471057d9 
round 4 : f 41a709c89ea80481aa3d2b9b2a9f 8ca 
Key t 7] :b454dda74aeb4eff227ba48a58077599 
Key [ 8] :bcba6aec050116aa9b7c6a9b7314d796 
round 5 : 2 0 f dda2 0 f 4a2 6blbd3 8eb7f 3 5 5a7be87 
Key E 9] :d41f8a9de0a716eb7167alb6e321c528 
Key [10] : 5353449982247782dl68ab43f 17bc4d8 
round 6 : a70e316997eeed49a5a9ef 9ba5e913b5 
Key [11] : 32cbc9cf Ia81e36a45153972347ce4ac 
Key [12] : 5747619006cf 4ef 83 4c74 9f 2c4b9f ebS 
round 7 : e66f 2 317a825f 589f 76b47b6aa6e73fb 
Key [13] : f 9b68beba0a09d2a570a7dc88cc3c3c2 
Key [14] : 55718 f9a4f0blf9484eBc6bl86a41a4b 
round 8 : 5f 68f 940440a9798e074776019804ada 
Key [15] :4ecc29belb4d78433f6aa30db974a7fb 
Key [16] : 8470a066f fb00cda7b08059599f 919f5 
Key [17] : f 3 9a3 6d74e960a051elca98b777848f 4 
Ka : 9ac64309a37c25c3b4a584fc002al618 



rand : 7edb65f 01a2f 45a2bc9b24fb3390667e 
PIN lengtti =12 octets 
PIN :2e5a42797958557b23447ca8 
address : 04f 0d2737f 02 

round 1: 7edb65f 01a2f45a2bc9b24fb3390666e 
Key [ 1] :2e5a42797958557b23447ca804f 0d273 
Key [ 2] :l8a97c856561eb23e71af ae9elbe4799 
round 2 : 3436el2db8f f dcl265cb5a86da2f edOb 
Key t 3] : 7c090adcbc73201el7c4f 7aalab8aec8 
Key [ 4] :7cb58a33602fbe4194c7cc797ce8c454 
round 3 : caed6a£4226f 67e4adl914620803ef 2a 
added - > : b4c8cf 043 8 9eac4611b43 89 93b93 S 544 
Key [ 5] :f 4dce7d607b5234562d0ebb2267b08b8 
Key [ 6] : 560b75c5545751fd8fa99fa4346e654b 
round 4 : ee67c87d6f 74bb75db98f 68bf f 0192cl 
Key [ 7] :32fl0cefd8d3e6424c6f 91fl437808af 
Key [ 8] :a934a46045be30fb3be3a5f3f 7bl8837 
round 5 : 792398dcbeb8dl0bdb07ae3c819e943c 
Key [ 9j :a0fl2e97c677a0e8ac415cd2c8a7ca88 
Key [10] :e27014c9087a5fSca03e8c6alda3bfl3 
round 6 : e778b6e0c3e8e7edf 90861c7916d97aa 
Key [11] :lb4a4303bcc0b2e0f41c72d47654bd9f 
Key [12] : 4bl302a50046026d6c9054f c8387965a 
round 7 : If af ddc7ef a5f 04cldecl869d3f 2d9bb 
Key [13] : 58c334bb543d49eca562cdbe0280e0fc 
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Key tl4] :bdb60d383c692d06476b76646c8dec48 
round 8 : 3d7c326d074bd6aa222ea050f 04a3c7f 
Key [15] : 78c0162506be0b5953e8403c01028f 93 
Key [16] : 24d7dbbe834dbd7b67 f 57 f cf Od3 9d60f 
Key [17] :2e74flf 3331c0f6585e87b2f715el87e 
Ka :d3af4c81e3f482f062 999dee7882a73b 



Bluetooth. 



rand : 26a92358294dce97bld79ec32a67e81a 

PIN length =«11 octets 

PIN :05fbad03f52fa9324f 7732 

address :b9ac07lf 9d70 

round 1 :26a92358294dce97bld79ec32a67e80a 
Key [ 1] :05fbad03f52fa9324f7732b9ac071f9d 
Key [ 2] :2504c9691c04al8480c8802e922098c0 
round 2 : 0be20e3d76B88e57bSbf 77f 97a8714f b 
Key [ 3] :576b2791dl212bea8408212f2d43e77e 
Key [ 4] :90ae36dcce8724adb618f 912dlb27297 
round 3 : 196 96670607644532 57d906b7e58bd5b 
added ->: 3f 12892 849c312c494542ea854bfa551 
Key [ 5] :bc492c42c9e87f 56ec31af 5474e9226e 
Key [ 6] : cl3 Sdldbed32d951 9acf b4169f 3elalO 
round 4 :ac40420S118f e771e54aa6f 392dall53 
Key [ 7] :83ccbdbbafl7889b7dl8254dc9252fal 
Key [ 8] :80b90al767d3f2848080802764e21711 
round 5 :41795e89ae9a0c£776f f ece76f47fd7a 
Key [ 9] :cc24e4a86e8eedl29118fd3d5223aldc 
Key [10] :7ble9c0eb9dab083574be7b7015a62c9 
round 6 : 29ca9e2f 87ca00370ef 1633505bf ba4b 
Key [11] :888e6d88cf4beb965cf7d4f32b696baa 
Key [12] :6d642f3e5510b0b043a44daa2cf5eec0 
round 7 : 81f c891c3c6f d99acc0002aa3 87e2366 
Key [13] :e224f 85da2ab63a23e2a3a036e421358 
Key [14] :c8dc22aaa739e2cb85d6a0c08226c7d0 
round 8 : e30b537e7a000e3d2424a9c0f 04c4042 
Key [15] :a969aa818c6b324bae391bedcdd9d335 
Key [16] : 6974b6f 2f 07e4c55 f 2cc0435c45bebdl 
Key [17] : 134b925ebd98e6b9 3cl4aee582062f cb 
Ka :be87b44d079d45a08a71dl5208c5cb50 



rand : Oedef 05 327eab526243 0f 21f c91ce682 

PIN length =10 octets 

PIN :82iae47390f3f48c32b3 

address : 7a3cdf e377dl 

round 1 : Oedef 05327eab5262430f 21f c91ce692 
Key [ 1] :8210e47390f3f48c32b37a3cdfe377dl 
Key [ 2] :c6be4c3e425e749b620a94c779e33a7e 
round 2 :07ca3c7a7a6bcbc31d79a856d9cf fcOe 
Key [ 3] :2587cec2a4b8e4£996a9ed664350d5dd 
Key [ 4] :70e4bf72834d9d3dbb7eb2c239216dc0 
round 3 : 792ad2ac4e4559dl463714d2f 16lb6f 4 
added - > :7708c2f f 692f Oef 7626706cd3 87d9c66 
Key [ 5] :6696ele7f8ac037elfff3598f0cl64e2 
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Bluetooth. 



Key t 63 :23dbf e4d0b561bea08fbcef25e49b648 
round 4 : 7d8c71a9d7f bdcbdSSlbdf 074550bl00 
Key [ 7] :b03648acd021550edee904431a02f 00c 
Key t 8] : cbl69220b73 98e8f 07773 0aa4bf06baa 
round 5 :b6f caa45064f f d557e4b7b30cf bb83eO 
Key [ 9] :af 602c2bal6a454649951274c2be6527 
Key [10] :5d60b0a7a09d524143ecal3ad680bc9c 
round 6 :b3416d391a0c26c558843debd0601e9e 
Key [11] :9a2f39bfe55ad9f5S2c5f09a5c3c0263 
Key [12] : 72cae8eebd7f abd9bl848333c2aab439 
round 7 :abe4b498d9c36ea97b8fd27d7f 813913 
Key [13] : 1 5f 27ealle83a51645d487b81 37ld7dc 
Key [14J : 36083c8666447e03d33846edf 444ebl2 
round 8 : 803210433aa945ba044dl02eabda3b22 
Key [15] : 0a3a8 977dd48f 3b6cl668 57abef add02 
Key [16] :f 06b6675d78ca0ee5bl761bdcdab516d 
Key [17] :cbc8a7952d33aa0496f 7ea2d05390b23 
Ka :bf0706d76ec3bllcce724b311bf71ff5 



rand : 86290e2892f 278f f 6c3fb917b020576a 

PIN lengtli = 9 octets 

PIN :3dcdffcfd086802107 

address : 791a6a2c5cc3 

round 1 : 86290e2892f 278f f 6c3f b917b0205765 
Key [ 1] :3dcdf fcfd086802107791a6a2c5cc33d 
Key [ 2J :b4962f 40d7bbl9429007062a3c469521 
round 2 : lec59f f d3 065f 19991872a7863b0ef 02 
Key [ 3] : eb9ede6787ddl96b7e340185562bf 28c 
Key [ 4] :2964e58aacf7287dl717a35blO0ae23b 
round 3 : f 817406f 1423f c2f e33e2 5152679eaaf 
added - > : 7e404e47861574d08f 7dde029 69941ca 
Key [ 5] : 6abf 9a314508f d61e486f a4e3 76c3 f 93 
Key [ 6] : 6dal48b7ee2S32114521842cbb274376 
round 4 :e9c2a8f ac22b8c7cf Oc619e2b3f 890ed 
Key [ 7] :df889cc34fda86f01096d52dll6e620d 
Key [ 8J : 5eb04bl47dc39dl974058761ae7b73fc 
round 5 : 444a8aac0e£eelc02£8d38f 8274b7b28 
Key [ 9] : 8426cc59eee3 91b2bd50cf 8f lef ef 8b3 
Key [10] :8b5d220a6300ade418da791dd8151941 
round 6 : 9185f 983dbl50blbccable5cl2eb63al 
Key [11] :82ba4ddef 833f 6a4dl8b07aa011f279B 
Key [12] : ce63d987946820S4e73d0359dad35ec4 
round 7 : 5eded2668f 5916dfd036c09e87902B86 
Key [13] :da794357652e80c70ad8b0715dbe33d6 
Key [14] : 7 32ef 2c0c3220b31f 3820c375e27bb2 9 
round 8 : 88a52 91b4acbba009a85b7dd6a834b3b 
Key [15] : 3ce75a61d4b465b70c95d7ccd5799633 
Key [16] : 5df 9bd2c3al7a840cdaaf b76cl71db7c 
Key [17] :3f8364bO89733d902bccb0cd3386B46f 
Ka :cdb0cc68f 6f 6fbd70b46652de3ef 3f fb 



rand : 3ab52a65bb3b2 4a08eb6cd284b4b9d4b 
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PIN length = 8 octets 
PIN :dOfb9b6S38d464d8 
address : 25aa68db91ab 

round 1 : 3ab52a6 5bb3b24a08eb6cd284b4b9d45 
Key t 1] :dOf b9b683Bd464d825a868db91abd0fb 
Key [ 2] : 2 57 3f 47b4 9dad633 0a7a9155b7aeabal 
round 2 : ad2 f fdf f 408f cf ab44941016a9199251 
Key [ 3] :d2c5b8fb80cbal3712905a589adaee71 
Key [ 4] :5a33ai511b338719fae242758dea0997 
round 3 : 2ddcl7e570d7931a2bldl3f 6ace928a5 
added - > : 17914180cbl2b7baa5d3e0dee734c5e0 
Key [ 5] :e0a4d8ac27fbe2783b7bcb3a36a6224d 
Key [ 6] : 949324c6864deac3eca8e324853ellc3 
round 4 : 62cldb5cf 31590d331ec40ad692eadf 5 
Key [ 7] : 6e67148088a01c2d4491957cc9ddc4aa 
Key [ 8] :S57431deab7087bb4c03fa27228f60c6 
round 5 : 9c8933bc361f 4bde4dlbda2b5f 8bb235 
Key t 9] :a2551aca53329e70ade3fd2bb7664697 
Key tlO] :05d0ad35de68a364b54b56e2138738fe 
round 6 : 9156db34136aa0€655bf 28a05be0596a 
Key [11] :1616a6bl3ce2f2895c722e8495181520 
Key [12] :bl2e78alll4847b01f 6ed2f 5al429a23 
round 7 : 84dcc292ed836clc2d523f 2a899a2ad5 
Key [13] : 316el44364686381944e95a£d8a026bb 
Key [14] :lab5Slba8d39d97ea7a9fel36dbfe2el 
round 8 : a7bdcac878d777877f 4eccf 042cf eeSe 
Key [15] : 70e21ab08c23c7544524b64492b25cc9 
Key [16] :35f 730f2ae2b950a49albf5c8b9f8866 
Key [17] :2fl6924c22db8b74e2eadflba4ebd37c 
Ka : 983218718ca9aa97892e312d86dd9516 

rand :a6dc447f f 08d4b366f f 96e6cf 207el79 
PIN length a 7 octets 
PIN : 9c57el0b4766cc 

address : 54ebd9328cb6 

round 1 :a6dc447f f 08d4b366f f 96e6cf 207el74 
Key [ 1] :9c57el0b4766cc54ebd9328cb69c57el 
Key [ 2] :00a609f4d61db26993c8177e3ee2bba8 
round 2 : Ied26b96a306d7014£4e5c9ee523b73d 
Key [ 3] :646d7b5f 9aaa528384bda39S3b542764 
Key [ 4] : a051a42212c0e9ad5c2c248259acal4e 
round 3 : a53f 526dbl8e3d7dS3edbf c97ll041ed 
added -> : 031b9612411b884b3ce62daS83172299 
Key [ 5] :dlbd5e64930e7f 838d8a33994462d8b2 
Key [ 6] :5dc7e2291e32435665ebd6956bec3414 
round 4 : 9438be308ec83f 35c560e2796f 4e0559 
Key [ 7] :10552f45af63b0fl5e2919ab37f 64fe7 
Key ( 8] :c44d5717cll4a58b09207392ebe341f 8 
round 5 :b79a7bl4386066d339f 799c40479cb3d 
Key t 9] : 6886e47b782325568eaf59715a75d8f f 
Key [10] :8ele335e659cd36bl32689f78cl47bda 
round 6 : ef 2 3246222aaal66438dl0c34el7424b 



Bluetooth. 
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Key [11] :8843efeedd5c2b7c3304d647f 932f 4dl 
Key [12] : 13785aaedd0adf67abb4f 01872392785 
round 7 : 02dl33f e40dl5f 1073673b36bba35abd 
Key [13] : 837d7ca2722419e6be3f ae35900c3 958 
Key [14] ; 93f 8442973e7f ccf 2e7232dld057c73a 
round 8 : 275506a3d0ec84e94cc58ed60054505e 
Key [15] :8a7a9edffa3c52918bc6a45f57d91f Sd 
Key [16] : f 214a95d777f 763c56109882c4b52 c84 
Key [17j :10e2ee92c5ealddc5eb010e55510c403 
Ka : 9cd6650ead86323e87caf blf f 516dle0 



Bluetooth. 



rand : 3348470a7ea6cc6eb81b40472 1332 62c 
PIN length ~ 6 octets 
PIN :fcadl69d7295 
address : 430d572f 8842 

round 1 : 3 348470a7ea6cc6eb81b404721332 620 
Key [ 1] :fcadl69d7295430d572f8a42f cadl69d 
Key [ 2] :b3479d4d4fdl78c43e7bc5b0c7d8983c 
round 2 : af 976da9225066d563el0ab955e6f c32 
Key [ 3] :7112462b37d82dd81a2a35d9eb43cb7c 
Key [ 4] :c5a7030f 8497945ac7b84600dldl61fb 
round 3 : d08f 826ebd55a0bd7591cl9a89ed9bde 
added -> : e3d7c964c3fb6cd3cdacaidda820clf e 
Key [ 5] :84b0c6ef4a63e4dff 19blf546d683df5 
Key [ 6] :f4023edfc95dle79ed4bb4de9bl74f5d 
round 4 : 6cd952785630df c7cf 81eea625e42cSc 
Key t 7] :ea38dd9a093ac9355918632c90c79993 
Key [ 8] :dbba01e278ddc76380727f 5d7135a7de 
round 5 : 93573b2971515495978264b88f 330f 7f 
Key [ 9] :d4dc3a31be34e412210fafa6eca00776 
Key [10] :39dlel90ee92b0ffl6d92a8be58d2fa0 
round 6 :b3f 01d5e7f elce6da7b46d8c3a9baf 47 
Key [11] :leb081328d4bcf 94c9117bl2c5cf22ac 
Key [12] :7e047c2c552f 9fl414d946775fabfe30 
round 7 : 0b833bf f 6l06d5bae033b4ce5af 5a924 
Key [13] : e78e685d9b2a7e29e7f 2al9dlbc38ebd 
Key [14] : Ib582272a3121718c4096d2d8602f 215 
round 8 : 23de0bbdc70850a7803f 4f 10c63b2c0f 
Key [15] : 8569e860530d9c3d48a0870dac33f 676 
Key [16] :6966b528fddldc222527052c8f6cf 5a6 
Key [17] : a34244c757154c53171c663b0b56d5c2 
Ka : 98f 1543ab4d87bd5ef 5296fb5e3d3a21 



rand : Of 5bbl50b4371ae4e5785293d22b7b0c 
PIN length = 5 octets 
PIN :bl0d068bca 
address :b44775199f 29 

round 1 : Of 5bbl50b4371ae4e5785293d22b7b07 
Key [ 1] :bl0d068bcab44775199f 29bl0d068bca 
Key [ 2] : aec70dl04 8f Ibbd2cl8040318a8402ad 
round 2 : 342d2b79d7f b7cdll0379742b9842c79 
Key [ 3] : edSdScf 338f29ef4420639ef488e4fa9 
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Key [ 4] :al584117541b759ba6d9f 7eb2bedcbba 
round 3 : 9407e8e3e810 603921bf 8 Icf da62770a 
added - > : 9b6299b35c477addc437d35c088df 20d 
Key [ 5J :09a20676666aeed6f22176274eb433f4 
Key [ 6] :840472c001add5811a054be5f 5C74754 
round 4 : 9a3ba953225a7862cOa842ed3dOb2679 
Key [ 7J : fad9e45c8bf70a972fcd9bff 0e8751f 5 
Key [ 8J : eSf 30f f 666df d212263416496f f 3b2c2 
round 5 : 2c573bS480852e87 5df 34b28a5c44509 
Key [ 9] : 964cdba0cf8d593f2fc40f96daf 8267a 
Key [10] :bcd65cllbl3ela70bcd4aafba8864fe3 
round 6 : 21b0cc49e8S0c5811d24dee0194e6e9e 
Key [11] :468c8548ea9653clal0df 6288dd03cld 
Key [12] :5d252dl7af4b09d3f4b5f7bS677b8211 
round 7 : e6d6bdcd63eld37d9883543ba86392f d 
Key [13] : e814bf 3 07c767428c67793dda2df 95c7 
Key [14] : 4812b979f dc2 Of Of f 0996 f 61673a42cc 
round 8 : e3dde7ce6bd7daa34599aa04d6a760ab 
Key [15] : 5ble203 3dlcd549f c4b02 8146eb5b3b7 
Key [16] :0f284cl4fb8fe706a5343e3aa35af7bl 
Key [17] :blf7a4b7456d6b577fded6dc7a672e37 
Ka : C55070b72bc982adb972ed05dla74ddb 



Bluetooth. 



rand : 148662a4baa73cf adb55489159e476el 
PIN length ^ 4 octets 
PIN :fb20fl77 
address : a683bd0bl896 

round 1 : 148662a4baa73cf adb55489159e476eb 
Key [ 1] :fb20fl77a683bd0bl896fb20f 177a683 
Key [ 2] : 47266cef bf a468ca7916b458155dc825 
round 2 : 3a942eb6271c3 f 4e43 383 8a5d3f cbd27 
Key [ 3] :6a8853a6d6575eb2f6a2724b0fbcl33b 
Key [ 4) :7810df048019634083a2d9219d0b5fe0 
round 3 : 9c835b98a063701c0887943596780769 
added - > : 8809bd3cla0aace6d3dcdca4cf 5c7d82 
Key [ 5] :c7af 6dcf 56dalbbd413828b33f 5865b3 
Key t 6] :eb3f3d407dl60df3d293a76dla513c4a 
round 4 : 7e68c4baf a020a4a59b5al968105bab5 
Key [ 7] :d330e038d6bl9d5c9bb0d7285a360064 
Key [ 8] :9bd3ee50347c00753dl65faced702d9c 
round 5 :227bad0cf 0838bdbl5b3b3872c24f 592 
Key t 9] :9543ad0fb3fe74f83e0e2281c6d4f5f0 
Key [10] :746cd0383cl7e0e80e6d095a87fd0290 
round 6 :e026e98c7ll21a0cb739ef 6f 59el4d26 
Key [llj :fa28bea4blc417536608f llf406ealdd 
Key [12] :3aee0f4d21699df 9cb8caf5354a780ff 
round 7 :cd6a6d8137d55140046f 8991dalf a40a 
Key [13] : 372b71bc6dlaa6e785358044f bcf 05f 4 
Key [14] :00a01501224c0405de00aa2ce7b6ab04 
round 8 : 52cd7257f e8d0c782c259bcb6c9f 5942 
Key [15] : C7015c5cld7c030e00897f 104a006d4a 
Key [16] : 260a9577790c62e074e71el9f d2894df 
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Bluetooth. 



Key [17J :c041b7a231493acdl5ddcdaee94b9f 52 



Ka 



;7ec864df2fl63 7c7e81f2 319ae8f4671 



rand 



:193alb843 76c88882c8d3b4ee93ba8d5 



PIN length = 3 octets 



PIN 



al23b9 



address : 44S9a44610f 6 

round 1 : 193alb84376c88882c8d3b4ee93ba8dc 
Key [ 1] :al23b94459a44610f 6al23b94459a446 
Key [ 2] :5f64d384c8e990cld25080eb244dde9b 
round 2 : 3badbd58f 1008 31d781ddd3ccedef d3f 
Key [ 3] :5abc00eff 8991575c00807c48f6dbea5 
Key [ 4] :127521158ad6798fb6479dld22S8abe6 
round 3 : 0b53075a4 9c6bf 2df 2421c6 55 f dedf 68 
added -> : 128d22de7e3247a5decf 572bb619a7b4 
Key [ 5] :£2al£620448bde56665608d£2ab3952f 
Key [ 6] :7ca4c0af 02aad91dc39209c4edd220bl 
round 4 : 793f 4484f b592e7a78756f d4662f 990d 
Key t 7] :f 6445b647317e7e493bb92bf6655342f 
Key [ 8] :3cae503567c63d3595ebl40ce60a84c0 
round 5 : 9e46a8df 925916a342f299a830622 0a0 
Key [ 9] :734ed5a806e072bbecb425499387l679 
Key [10] :cda69ccb4b07f65e3c8547cllc0647b8 
round 6 : 6bf 9cd82c9elbel3f c58eae0b936c75a 
Key [11] :c48e531d3175c2bd26fa25cc8990e394 
Key [12] : 6d93d349a6c6e9f f 5b2614956 5bl3dl5 
round 7 : e96a9871471240f 198811d4b8311e9a6 
Key [13] : 5c4951e85875d663 526092cd4cbdb667 
Key [14] :f 19f7758f 5cde86c3791efaf563b3fd0 
round 8 : e94ca67d3721d5f b08ec06919ia01a46 
Key [15] :bf 0cl7f 3299b37d984ac938b769dd394 
Key [16] : 7edf 4ad772a6b9048588f 97be25bdelc 
Key [17] : 6ee7ba6af ef C5b561abbd8d6a29e8150 
Ka :acOdaabf 17732 f632e34ef 193 65ahf5d 



rand : 1453db4d057654e8eb62d7d62ec3608c 
PIN length = 2 octets 
PIN :3eaf 
address : 41l£bbb51dle 

round 1 : 1453db4d057654e8eb62d7d62ec36084 
Key [ 1] : 3eaf411fbbb51dle3eaf411fbbb51dle 
Key [ 2] :c3ala997509£00£b4241aba607109c64 
round 2 : 0b78276clebc65707d38c9c5f al372bd 
Key t 3] :3c729833aelce7f84861e4dbad6305cc 
Key [ 4] :c83a43c3a66595cb8136560ed29be4ff 
round 3 : 23£3£0f 6441563d4c202cee0e5cb2335 
added - >: 3746cbbb418bb73c2 964a536cb8e83bl 
Key [ 5] :18b26300b86b70acddlc8f5cbc7c5da8 
Key [ 6] :04efc75309b98cd8f Icef 5513cl8e41e 
round 4 : c61a£a90d3cl4bd£5 8832 0e857af dcOO 
Key t 7] : 517c789cecadc455751a£73198749fb8 
Key [ 8] :fd971l£913b5c844900fa79dd765d0e2 
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round 5 :ada0e02ccb556a£8b£a3217d9801183a 
Key t 9] rbbScf 30e7d3ceb930651bldl6ee92750 
Key [10] :3d97c7862ecab42720e984972f8efd28 
round 6 : 0b58e922438d224db34b68f ca9a5eal2 
Key [11] :4ce730344f6b09e449dcdb64cd466666 
Key [12] : 38828c3a56f 922186adcd9b71 3cdcc31 
round 7 :b90664c4ac29a8b4bb26debec9f f c5f 2 
Key [13] :d30fd865ea3e9edcf f 86a33a2c319649 
Key [14] :lfdb63e54413acd968195ab6fa424e83 
round 8 : 6934de3067817cef d811abc5736cl63b 
Key [15] : al6b7c655bbaa262c807cba8ael66971 
Key [16] : 7903dd68630105266049e23ca607cda7 
Key [17] :a88446f2d95eSc2d2803e6f4e815ddc9 
Ka : 1674£9dc2063cc2b83d3e£8ba692ebe£ 



Bluetooth. 



rand : 1313f 7115a9db842f cedc4bl0088b48d 

PIN length = 1 octets 

PIN :6d 

address : 008aa9be62d5 

round 1 : 1313£7115a9db842 f cedc4bl0088b48a 
Key ( 1] :6d008aa9be62d56d008aa9be62d56d00 
Key [ 2] :46eb£ea£b6657b0al984a8dc0893accf 
round 2 : 839b23b83b5701ab095bafdl62ec0ac7 
Key [ 3] :del5595edc£058a£62498ee3cldc6098 
Key [ 4] : dd409c3 444e94b9cc083 96ae967542a0 
round 3 : c0a2010cc44f 2139427£093f 4f 97ae68 
added - > :d3b5£81d9eecd97bbe6ccd8e4f If 62e2 
Key [ 5] : 487de££5d519£6a6481e947b926£633c 
Key [ 6] :5b4b6e3477ed5c2c01f6e607d3418963 
round 4 : Ia5517a0ef ad3575931d8ea3bee8bd07 
Key [ 7] :34b980088d2b5fd6b6a2aceeda99c9c4 
Key [ 8] : e7d06d06078acc4ecdbc8da800b73078 
round 5 : d3cel£df e716d72cl075f £37a8a2093f 
Key [ 9] :7d375bad245c3b757380021a£8ecd408 
Key [10] :14dac4bc2f4dc4929a6cceec47f4c3a3 
round 6 : 47e90cb55be6e8dd0£583623c2£22S7b 
Key [11] :66c£da3c63e464b05e2e7e25£8743ad7 
Key [12] : 77cf ccdalad380b9f df Idf 10846b50e7 
round 7 : £a66ae6624£7abd4a4£5bd24b04b6d43 
Key [13] : 3elldd84c031a470a8b66ec6214e44c£ 
Key [14] :2£03549bdb3c511eea70b6Sddbb08253 
round 8 : 02e8el7cf 8be4837c9c40706b613df a8 
Key [15] :e2£331229ddf cc6e7bea08b01ab7e70c 
Key [16] :b6b0c3738c5365bc77331b98b3£ba2ab 
Key [17] : £5b3973b636119e577c5cl5c87bc£dl9 
Ka : 38ec0258134ec3£08461ae5c32d968al 
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Bluetooth. 



9.5 



FOUR TESTS OF E3 



rand 



: 00000000000000000000000000000000 



aco 



:48afcdd4bd40fef76693bll3 



key 



:ooaooooooooooooooooooooooooooooo 



round 1 : 00000000000000000000000000000000 
Key [ IJ lOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO 
Key t 2] : 4697blbaa3b7100ac537b3c95a28ac64 
round 2 : 78dl9f 9307d2476a523ec7a8a026042a 
Key [ 3] : ecabaac667955aodf 89af 66e66dc053d 
Key [ 4] : 8ac3d8d96ae9364943b£ebd4969b68a0 
round 3 : 600265247668dda0e81c07bbb30ed503 
Key [ 5] : 5dS7921f dS715cbb22clbe7bbc996394 
Key [ 6] :2a61b8343219fdfbl740e6511d41448f 
round 4 : d7552ef 7cc9dbde568d80c2215bc4277 
Key t 7] : dd0480dee731d67f 01a2f 739da6f 23ca 
Key [ 8] :3ad01cdl303el2alcd0fe0a8af82592c 
round 5 : f bOSbef 32b52ab8f 2a4f 2b6ef 7f 6d0cd 
Key [ 9] :7dadb2efc287ce75061302904f2e7233 
Key [10] :c08dcfa981e2c4272f 6c7a9f 52ell538 
round 6 : b46b711ebb3cf 69e847a75f 0ab8a4bdd 
Key [11] ; fc2042c708e409555e8cl47660f fdfd7 
Key [12] : f a0b21001af 9a6b9e89e624cd99150d2 
round 7 : csasf 308f f 194 042 94f 06b2 92e978 994 
Key [13] :18b40784ea5ba4c80ecb48694b4e9c35 
Key [14] : 454d54e52 53c0c4a8b3f cca7db6baef 4 
round 8 : 2665f adbl3acf 952bf 74b4abl2264b9£ 
Key [15] : 2df 37c6d9db52 674f 2 93 53b0f 011ed83 
Key [16] : b60316733ble8e70bda61b477e2456f 1 
Key [17] :884697blbaa3b7100ac537b3c95a28ac 
round 1 : 5d3ecbl7f 26083df 0b7f 2b9b29aef 87c 
Key ( 1] :e9e5dfclb3a79b83e9e5dfclb3a79583 
Key [ 2] :7595bf 57e0632c59f 435cl€697d4c864 
round 2 :de6£e85c58272 33f e22514al6f 321bd8 
Key [ 3] :e31b96afcc75d286ef0ae257cbbc05b7 
Key [ 4] :0d2a27b471bc0108c6263aff 9d9b3b6b 
round 3 : 7cd33 5b50d09dl39ea6702623af 85edb 
added -> : 211100a2f f 6954e6ele62df 913a656a7 
Key [ 5] : 98dleb5773cf59d75d3bl7b3bc37cl91 
Key [ 6] :fd2b792a2408ddd4ea0aa7511133336f 
round 4 : 991dccb3201b5blc4cef f 65a3711ele9 
Key [ 7] : 331227756638a41d57b0f7e071ee2a98 
Key [ 8] : aa0dd8cc68b406533d0f ld64aabacf 20 
round 5 : ia768c7964818805f e4c6ecae8a38 599 
Key [ 9] :669291b0752e63f806fce76fl0ell9c8 
Key [10] :ef8bdd46be8ee0277e9b78adeflecl54 
round 6 : 82f 9aal27a72632af 43dlal7e7bd3a09 
Key [11] :f 3902eb06dc409cfd78384624964bf51 
Key [12] : 7d72702b21f 97984a721c99b04982 39d 
round 7 : 1543d7870bf 2d6d6ef ab3cbf 62dca97d 
Key [13] : 532e60bceaf 902c52aa6c2c283ecf a32 
Key [14] : 181715e5192ef b2a64129668cf 5d9dd4 
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round 8 : eee3e8744a5f 8896de95831ed837f f d5 
Key [15J : 830l7cl434342d42 90e961578790f 451 
Key [16] :2603532f365604646ff6S803795ccce5 
Key [17] :882f7c907b565ea58daelc928a0dcf41 
kc :cc802aecc7312285 912e90af 6alell54 



Bluetooth. 



rand : 950e604e655ea3800fe3eb4a2 8918087 
aco :68f4f472b5586ac5850f5f74 
key : 34e86915d20c485090a6977931f 96df 5 

round 1 : 950e604e655ea3800fe3eb4a2 8918087 
Key t 1] :34e86915d20c485090a6977931f 96df5 
Key [ 2] : 8de2S95003f9928efaf 37e522993Sbdb 
round 2 : d46f 5a04c967f 55840f 83dlcdb5f 9af c 
Key [ 3] :46f 05ec979a97cb6ddf842eccl59c04a 
Key [ 4] :b468f0190a0a83783521deae8178d071 
round 3 : el6edede9cb6297f 32el203e442ac73a 
Key t 5] :8al71624dedbd552356094daaadcfl2a 
Key [ 6] : 3085e07ca5e4b99313f Se0ca37b5f819 
round 4 : 805144e55elece96683d2 3366f c7d24b 
Key [ 7] :fe45c27845169a66b679b2097dl47715 
Key [ 8] : 44e2f 0c35f 64 514e8bec66c5dc24b3ad 
round 5: edbaf 77af 070bd22e9304398471042f 1 
Key [ 9] :0d534968f3803b6af447eaf 964007e7b 
Key [10] : f5499a32504d739ed0b3c547e84157ba 
round 6 : 0dabla4ca46ae£0b65bl498812a73b50 
Key [11] :el7e8e456361c46298e6592a6311f3fb 
Key [12] : ec6dl4da05d60e8abac807646 931711f 
round 7 : Ie7793cac7f 55a8ab48bd33bc9c649e0 
Key [13] :2b53dde3d89e325e5f f808ed505706ae 
Key [14] :41034e5c3fb0c0d4f445f 0cf23be79b0 
round 8 : 3723768baa78b6a23ade095d995404da 
Key [15] :e2ca373d405a7abf22b494f28a6fd247 
Key [16] :74e09c9068c0e8flc6902dlb70537c30 
Key [17] :767a7flacf75c3585a55dd4a428b2119 
round 1 : 39809af b773efdlb7510cd4cb7c49f 34 
Key [ 1] :ld0d48d485abddd3798b483a82a0f878 
Key [ 2] :aed957e600a5aed5217984dd5fef6fd8 
round 2 : 6436ddbabe92655c87a7d0cl2ae5e5f 6 
Key [ 3] :fee00bb0de89b6e£0a28.9696a4faa884 
Key [ 4] :33ce2£4411db4dd9b7c42ccS86b8a2ba 
round 3 :cec690£7e0aa5£063062301e049a5cc5 
added - >: f 7462a0c97e85cld4572£d52b35e£b£l 
Key [ 5) :b5116f5c6c29e05e4acb4d02a46a3318 
Key [ 6] :f£4fal£0£73dla3c67bc2298abc768£9 
round 4 :dcdf e942e9f 0163£c24a47l8844b417d 
Key [ 7] :5453650c0819e001e48331ad0e9076e0 
Key [ 8J :b4£f 8dda778e26c0dce08349b81c09al 
round 5 : 26Sal6b2£76€a£ae396e7a98cl89£da9 
Key [ 9] :£638fa294427c6ed94300£d823b31dl0 
Key [lOj :lccfa0bd86a9879bl7d4bc4S7e3e03d6 
round 6 : 628576b5291d53dleb8611c8624e863e 
Key [11] :0eaee2ef4602ac9cal9e49d74a76d335 
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Bluetooth. 



Key [12] :6el062fl0al6e0d378476da3943842e9 
round 7 : d7b9c2e9b2d5ea5c27019324cae882b3 
Key [13] : 40be960bd22c744c5b2 302468 8e554b9 
Key [14] : 9 5c9902cb3c23 Ob44dl4ba909730d211 
round 8 : 97f b6065498385e47eb3df 6e2ca43 9dd 
Key [15] : 1 0d4b6eldld67 98aa00aa2 951e32d58d 
Key [16] : C5d4b91444b83ee57 8004ab88 76ba605 
Key [17] : 1663a4f 98e2862eddd3ec2fb03dcc8a4 
kc :clbeafea6e747e304cf 0bd773 4b0a9e2 



rand 




:6a8ebcf 5e6e471505be68d5eb8a32 00c 


aco 




: 658d791a9554b77c0b2f 7b9f 


-key 




:3 5cf77b3 3 3c294671d426fa79 993al33 


round 


1 


: 6aaebcf5e6e471505be68d5eb8a32 00c 


Key [ 


1] 


:3 5cf77b33 3c294671d426fa79 993al33 


Key [ 


2] 


:c4524e53b95b4bf2d7b2f 095f 63 54 5fd 


round 


2 


:ade94ec58 5db0d27el7474b58192c87a 


Key [ 


3] 


:c99776768c6e9f 9dd383 5c52cea8dl8a 


Key [ 


4] 


:f 12 95db23 82 3ba2792f21217f c01d2 3f 


round 


3 


:da8dclal0241ef 9e6e069267cd2c6825 


Key [ 


5] 


: 9083db95a69552 35bbfadaaeefec5f0b 


Key [ 


6] 


: 8bEa)6bc253d0d0c7e0107feab728f f 68 


round 


4 


:e6665ca0772ceecbc21222f f 7be074f 8 


Key t 


7] 


:2falf4e7a4cf 3ccd876ec30dl94cf 196 


Key [ 


8] 


:2 67364be247184d53 37586al9df8bf84 


round 


5 


:a857a9326c9ae908f 53fee511c5f4242 


Key [ 


9J 


:9aef21965bla6faa3 948dl07026134c7 


Key [10] 


:d2080c751def5dc0d8ea3 53cebf7b973 


round 


6 


:6678748alb5f21ac0 5cflbll7a7c3 42f 


Key [11] 


:d709a8ab70b0d5a2516900421024b81e 


Key [12] 


:4 93e4843 805£l05ad605c8dl025£8a56 


round 


7 


:7 66c66fe9c460bb2ae3 9ec01e435f 725 


Key [13] 


bled21b71daea03f4 9fe74b2cllfc02b 


Key [14] 


0elded7ebf 23c72324a0165a698c6 5c7 


round 


a 


3 96e0ff7b2b9b7a3b3 5c9810882c7596 


Key [15] 


b3bf4841dc92f440fde5f 024f 9ce8be9 


Key [16] 


Ic69bc6c2 994f4c84f 72be8f6bl88 963 


Key [17] 


bb7b662 86dd679a471e2792270f 3bb4d 


round 


1 


4 5654f2f265496752a7200f07cbl0ec9 


Key [ 


1] 


Ie2a5 672e6652 9e4£427b0682a3a34b6 


Key [ 


2] 


974944flce0037blfebcf 61a2bc961a2 


round 


2 


990cd869c534e76ed4f4af7b3bfbc6c8 


Key [ 


3] 


8147631fblce95d624b480fc7389f 6c4 


Key [ 


4] 


6e90a2db33d284aal313 5f 3c032aa4£4 


round 


3 


ceb662f a75aa6b94e8192b5989abf 975 


added 


- > 


8blbbld753fe01elc08b2ba9f 55c07bc 


Key [ 


5] : 


Cbad2 46d24e36741c46401e63a7a05f9 


Key [ 


6] : 


dcf 52aaec5713110345a41342c566fc8 


round 


4: 


d4e000beSde78c0f56ff218f3cldf 61b 


Key [ 


7] : 


81975 37aa9d27e67dl7cl6bl82c8ec65 


Key [ 


8] : 


d66e0 0e73d83 5927a307a3ed7 9d03 5d8 


round 


5: 


9a460 3bde£954cfaade2052604bed4e4 
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Key [ 9) :71d46257eccl022bcd312ce6cll4d75c 
Key tlO] :f91212fa528379651fbd2c32890c5e5f 
round 6 : 09a0f dl97ab81eb933eece2f e0132dbb 
Key ill] :2a3acc551591fadce821b02£b9491814 
Key [12] :ca5f 95688788e20d94822fl62b5a3920 
round 7 : 494f 455a2e7a5db861ece816d4e363e4 
Key [13] : ba574aef 663c462d3 53 99ef b9 99d0e40 
Key [14] :6267afc834513783fefl601955fe0628 
round 8 : 37a819f 91c8380f b7880e640e99ca947 
Key [15] : fdcd9be5450eef0f 8737e6838cd38e2b 
Key [16] :8cfbd9ba056c6alce222b92b94319b38 
Key [17] :4f 64cl072c891c39eeb95e63318462e0 
kc :a30 32b4dflcceba8adcla0442 7224299 

rand : 5ecd6d7Sdb322c75b6afbd799cbl8S68 
aco : 63f 701c7013238bbf88714ee 

key :b9f 90cS3206792bl82683 8b43 5b87d4d 

round 1 : 5ecd6d75db322c75b6afbd799cbl8668 
Key [ 1] :b9f 90cS3206792bl826838b435b87d4d 
Key [ 2] :15f74bbbde4b9dle08f858721f 131669 
round 2 : 72abb85f c80clSec2b00d72873ef 9ad4 
Key [ 3] :ef 7fb29f ObOlf a2706c7439cc52f 2dab 
Key [ 4] :3003a6aecdee06b9ac295cce30dcdb93 
round 3 : 2f 10bab93aOf 73742183c68f 712df a24 
Key [ 5] :5fcdbb3afdf7df06754c954fc6340254 
Key t 6J :ddaa907S663S579573fe8calf 93d4a38 
round 4 : 183bl45312f d99d5ad08e7ca4a52f 04e 
Key [ 7] :27ca8a7fc703aa61f6d7791fcl9f704a 
Key [ 8] :702029d8c6e42950762317e730ec5dl8 
round 5 : Cbad52d3a026b2e38b9ae6f ef f f ecc32 
Key [ 9) :ffl5eaa3f73f 4bc2a6ccfb9ca24ed9c5 
Key [10] :034e745246cd2e2cfc3bda39531ca9c5 
round 6 : ceSf 159d0alacaacd9f b4643272033a7 
Key [11] :0a4d8ff 5673731c3dc8fe87e39a34b77 
Key [12] :637592fab43al9ac0044a21afef455a2 
round 7 : 8a49424al0c0bea5aba52dbbf f cbcce8 
Key [13] : 6b3 f deSSf 4f 6438d43cdbe92667622b8 
Key [14] :al0bfa35013812f 39bf2157f Ic9fca4e 
round 8 : f 5el2da0e93e26a5850251697ec0b917 
Key [15] : 2228f e5384e573f 48f ddl9ba91f Ibf 57 
Key [16] : 5f 174db2bc88925c0f bc6b5485baf c08 
Key [17] :28f f 90bd0dc31ea2bb479feb7d8fe029 
round 1 : 0c75eed2b54clcf b9f f 522daef 94ed4d 
Key [ 1] :a21ceb92d3cO27326b4de775865£eBd0 
Key [ 2] :26f 64558a9fOal652f765efd546f 3208 
round 2 : 48d537ac209a6aaO7b7OOO0O16c602e8 
Key [ 3] : e64f 9ef 630213260f If 79745a0102ae5 
Key [ 4] :af6a59d7cebf d0182dcca9a537c4add8 
round 3 : 8b6d517ac893743a401b3f b7911b64el 
added - > : 87e23f a87ddf 90cldf 10616d7eaf 51ac 
Key [ 5] : 9a6304428b45dal23ab64c8805c32452 
Key [ 6] :8a£4dle9d80cb73ec6b44e9b6e4£39da 
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round 4 : 9f0512260a2f7a5067efc35bf 1706831 
Key [ 7] :79cc2dl38606f0fca4e549c34ale6dl9 
Key t 8] :803dc5cdde0efdbee7al342b2cd4d344 
round 5 : Ocf d7856edf af acSlf 29e86365de6f 57 
Key [ 9] : e8f a9 9644 Be6b6459ab51e7beX0132 5a 
Key (10] :2acc7add7b294acb444cd933f 0e74ec9 
round 6 : 2f If a34bf 3S2dc77c0983a01e8b7d622 
Key [11] :f 57de39e42182efd6586b86a90c86bbl 
Key [12] : e418dfdlbb22ebflbfc309cd27f 5266c 
round 7 : ee4f 7a53849bf 73a747065d3 5f 3752bl 
Key [13] : 80a9959133856586370854db6e0470b3 
Key [14] :f 4clbc2f 764a0193749f5fc09011alae 
round 8 : 8f ec6f 7249760ebf 69e370e9a4b80a92 
Key [15] :d036cef70d6470c3f 52f Ib5d25b0c29d 
Key [16] : d0956af 6b8700888alcc88f 07ad226dc 
Key [17] :lce8b39c4c7677373c30a49a3ee08794 
]cc :ea520cfc546b00eb7c3a6cea3ecb3 9ed 

= = = = s== = ss = = = s= = = sss = sa:ass3f = ss3:sss3ssssas 
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1 GENERAL AUDIO RECOMMENDATIONS 



1.1 MAXIMUM SOUND PRESSURE 

it is the sole responsibility of each manufacturer to design their audio products 
in a safe way with regards to injury to the human ear. Bluetooth doesn't specify 
maximum sound pressure from an audio device. 

1.2 OTHER TELEPHONY NETWORK REQUIREMENTS 

It is the sole responsibility of each manufacturer to design the Bluetooth audio 
product so that it meets the regulatory requirements of all telephony networks 
that it may be connected to. 



1.3 AUDIO LEVELS FOR BLUETOOTH 



Audio levels shall be calculated as Send Loudness Rating, SLR, and Receive 
Loudness Rating. RLR. The calculation methods are specified in ITU-T 
Recommendation R79. 

The physical test set-up for Handsets and Headsets is described in ITU-T 
Recommendation R51 and R57 

The physical test set-up for speakerphones and "Vehicle handsfree systems" is 
specified in ITU-T Recommendation P.34. 

A general equation for computation of loudness rating (LR) for telephone sets 
is given by ITU-T recommendations P.79 and is given by 



LR = logio 

m 



( \ 



(EQl) 



where 



m is a constant 0.2). 

vv/ = weighting coefficient (different for the various LRs). 

S/ = the sensitivity at frequency F,-, of the electro-acoustic path 

Ni,N2, consecutive filter bank numbers (Art. Index: 200-4000 Hz) 

(EQ 1) is used for calculating the (SLR) according to Figure 1.1:, and (RLR) 
according to Figure 1.2:. When calculating LRs one must only include those 
parts of the frequency band where an actual signal transmission can occur in 
order to ensure that the additive property of LRs is retained. Therefore ITU-T 
R79 uses only the frequency band 200-4000 Hz in LR computations. 
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1.4 MICROPHONE PATH 



Bluetooth. 



1.4.1 SLRm asur ment model 









PCM / 
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A/D, Filter 






BTR 
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/CVSD 






► 







Figure 1.1: SLR measurement set-up. 



1.5 LOUDSPEAKER PATH 



1.5.1 RLR measurement model 




Figure 1.2: RLR measurement set-up. 

1.6 BLUETOOTH VOICE INTERFACE 

The specification for the Bluetooth voice interface should follow in the first 
place the ITU-T Recommendations PJ9, which specifies the loudness ratings 
for telephone sets. These recommendations give general guidelines and spe- 
cific algorithms used for calculating the loudness ratings of the audio signal 
with respect to Ear Reference Point (ERP). 

For Bluetooth voice interface to the different cellular system terminals, loud- 
ness and frequency recommendations based on the cellular standards should 
be used. For example, GSM 03.50 gives recommendation for both the loud- 
ness ratings and frequency mask for a GSM temiinal interconnection with 
Bluetooth, 



1- The output of the CVSD decoder are 16-bit linear PCM digital samples, at a 
sampling frequency of 8 ksample/second. Bluetooth also supports 8-bit log 
PCM samples of A-law and ^-law type. The sound pressure at the ear refer- 
ence point for a given 16-bit CVSD sample, should follow the sound pressure 
level given in the cellular standard specification, 

2- A maximum sound pressure which can be represented by a 16-bit linear 
PCM sample at the output of the CVSD decoder should be specified according 
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to the loudness rating, in ITU R79 and at PGA value of 0 dB, Programmable 
Gain Amplifiers (PGAs) are used to control the audio level at the terminals by 
the user For conversion between various PCM representations: A-law. |a.-law 
and linear PCM. ITU-T G.711, G.712, G.714 give guidelines and PCM value 
relationships. Zero-code suppression based on ITU-T G.711 is also recom- 
mended to avoid network mismatches. 
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1.7 FREQUENCY MASK 



Bluetooth. 



For interfacing a Bluetooth terminal to a digital cellular mobile temninal. a com- 
pliance of the CVSD decoder signal to the frequency mask given in the cellular 
standard, is recommended to guarantee correct function of the speech coders. 
A recommendation for a frequency mask is given in Table 1.1. Figure 1 .3: 
shows a plot of the frequency mask for Bluetooth (solid line). The GSM fre- 
quency mask (dotted line) is shown in Figure 1.3; for comparison. 



dB A 

8.0 



Bluetooth 
GSM mask 




0:i 0.2 0.3 



1.0 2.0 3l0 3:4 4.0 fkHz 



0.5 



Figure 1.3: Plot of recommended frequency mask for Bluetootti. The GSM send frequency 
masl( is given for comparison (dotted line) 



Frequency 
(Hz) 
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(dB) 
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(dB) 
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4 
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Table 1. 1: Recommended Frequency Mask for Bluetooth 
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1 BASEBAND TIMERS 



This appendix contains a list of all timers defined in this specification. Defini- 
tions and default values of the timers are listed below. 

All timer values are given in slots. 
1.1 LIST OF TIMERS 

1.1.1 inquiryTO 

The inquiryTO defines the number of slots the inquiry substate will last. Its 
value is determined by an HCI command. 

1.1.2 pageTO 

The pageTO defines the number of slots the page substate can last before a 
response is received. Its value is determined by an HCI command. 

1.1.3 pagerespTO 

In the slave, it defines the number of slots the slave awaits the master's 
response, FHS packet, after sending the page acknowledgment ID packet. In 
the master, pagerespTO defines the number of slots the master should wait for 
the FHS packet acknowledgment before retuming to page substate. Both mas- 
ter and slave units should use the same value for this timeout, to ensure com- 
mon page/scan intervals after reaching pagerespTO. 

The pagerespTO default value is 8 slots. 

1.1.4 inqrespTO 

In the inquiry scan substate, when a device triggers on an inquiry, it waits a 
RAND random number of slots and retums to inquiry scan. The inqRespTO 
defines the number of slots the device will stay in the inquiry scan substate 
without triggering on an inquiry after the RAND wait period. The timeout value 
should preferably be in multiples of an inquiry train period. Upon reaching the 
inqrespTO, the device retums to CONNECTION or STANDBY state. 

The inqrespTO default value is 128 slots. 

1.1.5 newconnectionTO 

Every time a new connection is started through paging, scanning, master-slave 
switch or unparking, the master sends a POLL packet as the first packet in the 
new connection. Transmission and acknowledgment of this POLL packet is 
used to confirm the new connection. If the POLL packet is not received by the 
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Bluetooth. 



slave or the response packet is not received by the master for newconnecti- 
onTO number of slots, both the master and the slave will return to the previous 
substate. 

newconnectionTO default value is 32 slots. 



1.1.6 supervisionTO 

The supervisionTO is used by both the master and slave to monitor link loss. If 
a device does not receive any packets that pass the HEC check and have the 
proper AM_ADDR for a period of supervisionTO, it will reset the link supervisi- 
onTO work through hold and sniff periods. 

The supervisionTO value is determined by an HCI command. At the baseband 
level a default value that is equivalent to 20 seconds will be used. 
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1 GENERAL 



For the access procedure, several paging schemes may be used. There is one 
mandatory paging scheme which has to be supported by all Bluetooth devices. 
This scheme has been described in Baseband Specification Section 10.6 on 
page 99 In addition to the mandatory scheme, a Bluetooth unit may support 
one or more optional paging schemes. The method used for page scan is indi- 
cated in the FHS payload. see Baseband Specification Section 4.4.1 .4 on page 
56. Three additional optional paging schemes are possible; only optional pag- 
ing scheme /has been defined yet. 
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2 OPTIONAL PAGING SCHEME I 



In this section the first optional paging scheme is described which may be used 
according to the mles specified in Baseband Specification Section 10 on page 
95 and LMP Specification Section 3.23 on page 223. The paging code for 
optional scheme / is 1 (0 is used for the mandatory scheme), see also Base- 
band Specification Section 4.4.1.4 on page 56 

The main difference between the first optional paging scheme and the manda- 
tory scheme is the construction of the page train sent by the pager. In addition 
to transmission in the even master slots, the master is transmitting in the odd 
master slots as well. This allows the slave unit to reduce the scan window. 



2.1 PAGE 

The same 32 frequencies that are used for transmitting ID-packets in the man- 
datory paging scheme are used in the optional paging scheme / (for the con- 
struction of page trains, see Baseband Specification Section 11 .3.2 on page 
135. The 32 frequencies are also split into an A-train and B train. In contrast 
to the mandatory scheme, the same 32 frequencies that are used for transmit- 
ting are also used for reception trials, to catch the response from the 
addressed device. 

The construction of the page train in optional page scheme /differs from the 
page train in the mandatory scheme in two ways: 

• the page train consists of 1 0 slots, or 6.25 ms 

• the first 8 slots of the train are used to transmit the ID packets, the 9th slot is 
used to send a marker packet, and the 10th slot is used for the retum of a 
slave response 

The marker packets precede the return slot, indicating the position where the 
slave can respond, and with which frequency. For the marker codes M_ID, bit- 
inverted page access codes are used. If a marker code is received at T^ with 
frequency f^. a retum is expected at nominally Tpi+625^s at frequency f^. 

Note: The bit-inverted code M_ID to be used as marker code is beneficial for 
the implementation of the con-elators, because the sign of the correlation peak 
can be used to identify the mark code during page scanning. Still, the transmit- 
ting party is uniquely identified, since inverted ID packets are not identical to 
the ID packets for the device with bit-wise inverted LAP. 

The ft-equency ordering in the train and the frequencies used for the marker and 
receive slots change after every train. After 8 trains, all of which have a different 
appearance, the entire procedure is repeated. It is, therefore, more appropriate 
to talk about subtrains, each with length 6.25ms. Eight subtrains form a super- 
train, which is repeated. An example of a supertrain with the eight subtrains is 
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illustrated in Figure 2.1. The supertrain length is 50ms. In this example, the A- 
train is assumed with an estimated frequency of fg; as a consequence, the fre- 
quencies selected for the train range from fo to f^s. The marker codes M_ID are 
indicated as M; the receive (half) slots are indicated as R. 





^ 6.25 ms 








> 


subtrain 1 


M M 

1^ n H n n p n n m n n R n n n 


R R 


subtrain 2 


n n R n n fii R n R R fi n m n 
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R fH [^1 Fl H P R R R R R R R n fH n Cl fH 
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yy' 
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yy' 


subtrain 8 
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yy' 





Figure 2. 1: Example of train configuration for optional page scheme I. 



Corresponding to the paging modes RO. R1 and R2 of the mandatory scheme, 
the optional scheme supports the same three modes as described for the man- 
datory scheme in Baseband Specification Section 10.6.2 on page 99 

Since the subtrain length is now 10 slots, the 1.28s interval does not cover a 
multiple of (sub)trains any longer. Therefore, in contrast to the mandatory 
scheme, the exchange from A-train to B-train and vice versa is not based on 
the 1 .28s interval, but instead on a multiple number of supertrains. For the R1 
and R2 modes, the repetition of a supertrain Ng^p is indicated in Table 2.1 
below. 











R1 


Nsup=26 


Nsup=52 


Nsup=77 

iliiiliSfliHii 



Table 2, 1: Relation between repetition duration of A- and B-trains and paging modes R1 and 
R2 when SCO links are present 
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In accordance with the phase input to the hop selection scheme Xp in (EQ 4) on 
page 135 in the Baseband Specification (Section 11.3.2), the phase input Xp.opf 
in the optional mode is determined by: 

Xp_opt^[k„jj:,,,_^p, + ST(c/iO] mod 32 (EQ Al) 

where kQffset_opt 's determined by the A/B selection and the clock estimation of 
the recipient: 

^offset opt = CLKEi6.i2 + 24 A-train 

CLKE 16.12 + 8 B-train (EQ A2) 

and ST is a function determining the stnjcture of the sub- and supertrain: 

ST(c«0 = ( cnt mod 160 - 2*INT[ {{cnt mod 1 60) + 1 8)/20 ] ) mod 1 6 (EQ A3) 

koffseLopt 's determined once at the beginning of the repetition period. 
The CLKE value as is found at the beginning of the repetition interval is taken 
(the repetition interval being the interval in which the same supertrain is 
repeated all the time). As long as no train change takes place, /fo/feetop^ 
updated, cnt is a counter which is reset to zero at the beginning of the repeti- 
tion interval and is incremented at the half-slot rate (3200 cycles/s) 

The first two ID-packets of a train are transmitted in an even numbered slot. 

2.2 PAGE SCAN 

The basic page scanning is identical to the mandatory scheme except that a 
scan duration of 9.5 • 0.625 = 5.9375 ms is sufficient at the slave side. 

If a device wants to scan concurrently for the mandatory and optional mode 
(e.g. after an inquiry response was sent), the device shall try to identify whether 
the paging party uses the optional scheme after an ID packet was caught. This 
can be done by train tracing; i.e. the device can determine whether transmis- 
sion takes place in consecutive slots (optional paging scheme I) or In every 
. over slot (mandatory paging scheme), and/or whether mari^ codes are sent. 

2.3 PAGE RESPONSE PROCEDURES 

The page response procedures at the master and slave sides are almost iden- 
tical to the procedures described in the mandatory mode (see Baseband Spec- 
ification Section 10.6.4 on page 104). There are two differences: 

• The page response routine starts after the transmission and reception of the 
marker code M_ID 

♦ The ID packet sent by recipient is identical to the frequency in which the 
marker code was received 

For the page response timing, see Figure 2.2 and Figure 2.3. 
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Figure 2.2: Messaging when marker code is received In first half slot of even master slot 
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Figure 2.3: Messaging when marker code is received In second half slot of even master slot 



2.4 TRAIN TRACING 

This section outlines how a slave may search for the mark code although the 
current partitioning into A- and B-trains at the master side is not known. Train 
tracing means that the slave tries to receive as many page access codes from 
the train as possible, to catch a mark code as soon as possible. When search- 
ing for the mark codes, or trying to distinguish between the mandatory paging 
mode and the optional paging mode, a unit shall set up a hopping pattern for 
train tracing after the reception of the first access code. The hopping pattem 
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shall ensure that the transmission and reception is performed with a 50% 
probability on the same frequency regardless of the actual frequency set 
(16 frequencies) used for paging. 
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1 BLUETOOTH BASEBAND 



1 .1 THE GENERAL- AND DEVICE-SPECIFIC INQUIRY 
ACCESS CODES (DIACS) 

The Inquiry Access Code is the first level of filtering when finding Bluetooth 
devices and services. The main purpose of defining multiple lACs is to limit the 
number of responses that are received when scanning devices within range. 









0 

2-63 


0X9E8B33 
0X9E8BOO 

0x9E8B01-0x9E8B32, 
0x9E8B34-0x9E8B3F 


General/Unlimited Inquiry Access Code (GIAC) 
RESERVED FOR FUTURE USE 



Table 1. 1: The Inquiry Access Codes 



The Limited Inquiry Access Code (LIAC) is only intended to be used for limited 
time periods in scenarios where both sides have been explicitly caused to enter 
this state, usually by user action. For further explanation of the use of the LIAC, 
please refer to the Generic Access Profile [7], 

In contrast it is allowed to be continuously scanning for the General Inquiry 
Access Code (GIAC) and respond whenever inquired. 

1.2 THE CLASS OF DEVICE/SERVICE FIELD 

The Class of Device/Service (CoD) field has a variable format. The format is 
indicated using the 'Fomiat Type field' within the CoD. The length of the Fomnat 
Type field is variable and ends with two bits different from The version field 
starts at the least significant bit of the CoD and may extend upwards. 



1^ 24 bits 

t I f I 

V 

Y 

Format type field 



Figure 1. 1: General format of Class of Device/Service 

In the 'format #r of the CoD (Format Type field = 00), 11 bits are assigned as a 
bit-mask (multiple bits can be set) each bit con^esponding to a high level 
generic category of service class. Cun-ently 7 categories are defined. These 



^ Depends on format type 

J 
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Bluetooth. 



are primarily of a 'public service* nature. The remaining 11 bits are used to indi- 
cate device type category and other device-specific characteristics. 

Any reserved but otherwise unassigned bits, such as in the Major Service 
Class field, should be set to 0. 



23 



16 15 



8 7 



octets:: 



octet 2 i: 



octet 1:, 



0 bit transmission order 
:': ; octet transmission order 



-11 bits- 



-5 bits- 



-6 bits- 



Reserved for Service Classes 



M3jor device dass 



Minor device class 



0 0 



Networl<ing 
^ Rendering 
Capturing 
Object Transfer 
Audio 
Telephony 
^ Information 



When interpreted as a 
Irtde endian word 



' — Format type 



Figure 1.2: The Class of Device/Sen/Ice field (format type 1). Note the order in which the 
octets are sent on the air and stored in memory. 



1 .2.1 Major Service Classes 



Bitrio 



Major Seryteflh CJass 



13 

■:.14 
15 

'Mi. 
17 

19 

21 

23 



Limited Discx>verable l\4ode^ 
(reserved) 

Networking (LAN, Adhoc. ...) 

Capturing (Scanner. Mlaophone, ...) 

Audio (Speaker, Microphone, Headset service, ...) 

Information (WEB-server, WAP-server, ...) 



Table 1.2: Major Service Classes 
1. As defined in [7] 
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1.2.2 Maj rD vice Classes 

The Major Class segment is the highest level of granularity for defining a Blue- 
tooth Device. The main function of a device is used to determine the major 
class grouping. There are 32 different possible major classes. The assignment 
of this Major Class field is defined in Table 1 .3. 







12 


11 


10 


9 


8 


bit no of CoD 


0 




.■:p-:":;: 


a : 






0 


0 


0 


0 


1 


Computer (desktop, notebook, PDA, organizers, ...) 


o[ 


iiii 




: 1 


-.0% 


• Phone ^llul^^^ 


0 


0 


0 


1 


1 


LAN Access Point 


0: 


iiii 


i- 


0 


pf 




0 


0 


1 


0 


1 


Peripheral (mouse, joystick, keyboards. ..,) 


X 




lllll 


X 






1 


1 


1 


1 


1 


Unclassified, specific device code not assigned 



Table 1.3: Major Device Classes 

1 . Used where a more specific Major Device Class code is not suited (but only as speci- 
fied in this document. Devices that do not have a major class code assigned can use 
the ali-1 code until 'classified') 



1 .2.3 The Minor Device Class field 

The 'Minor Device Class field' (bits 7 to 1 in the CoD), are to be interpreted only 
in the context of the Major Device Class (but independent of the Service Class 
field). Thus the meaning of the bits may change, depending on the value of the 
'Major Device Class field'. When the Minor Device Class field indicates a 
device class, then the primary device class should be reported, e.g. a cellular 
phone that can also work as a cordless handset should use 'Cellular' in the 
minor device class field. 
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1.2.4 Min r Device Class field - Computer Maj r Class 







7 


6 


5 


4 


3 


2 


bit no of CoD 


-.0;::.. 










llll 


>'Unda$s{fie<J:».pG>d 


0 


0 


0 


0 


0 


1 


Desktop workstation 


0 


III 








;;;0 . 




0 


0 


0 


0 


1 


1 


Laptop 






'a;:.'' 




III 






0 


0 


0 


1 


0 


1 


Palm sized PC/PDA 


X 




K 


X 


llll 


x ■ 


Rarige 0x06-{)X7F reseryM 



Table 1.4: Sub Device Class field for the 'Computer' Major Class 



1.2.5 Minor Device Class field - Phone Major Class 







7 


6 


5 


4 


3 


2 


bit no of CoD 


:;0::-; 






llll 




llll 




0 


0 


0 


0 


0 


1 


Cellular 


= 0 : 






• ov; 




111 




0 


0 


0 


0 


1 


1 


Smart phone 






Mi 










X 


X 


X 


X 


X 


X 


Range 0x05-0x7F reserved 



Table 1.5: Sub Device Classes for the 'Phone' Major Class 
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1.2.6 Minor Device Class field - LAN Access P intMaj r Class 





MInbr.Otfy i^d": Class - 


7 


6 


5 


bit no of CoD 


0 : 








0 


0 


1 


1-17% utilized 


^% 


lllll 


0:; ;■ 




0 


1 


1 


33 - 50% utilized 


■I.:-. 


iilll 






1 


0 


1 


67 - 83% utilized 


'"i:'^-:=-^'" 








1 


1 


1 


No Service Available'' 



Table 1. 6: The LAN Access Point Load Factor field 

1. "Device is fully utilized and cannot accept additional connections at this time, please 
retry later^ 



The exact loading formula is not standardized. It is up to each LAN Access 
Point implementation to determine what internal conditions to report as a utili- 
zation percentage. The only requirement is that the number reflects an ever- 
increasing utilization of communication resources within the box. As a recom- 
mendation, a client that locates multiple LAN Access Points should attempt to 
connect to the one reporting the lowest load. 







4 


3 


2 


bit no of CoD 


0 ; 






. y nblSssJfii^d this- va|tje;.if . no^otfiibi^ ■:: - 


X 


X 


X 


range 0x01 -OxOF reserved 



Table 1. 7: Reserved sub-field for the LAN Access Point 
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1.2.7 Min rDevic Class field - Audi Maj r Class 



Bluetooth. 







7 


6 


5 


4 


3 


2 


bit no of CoD 




llll 


ill 


Mr 






nc^a^ifi^d^i'^ assign^ 




0 


0 


0 


0 


0 


1 


Device conforms to the Headset profile [9] 




X 


X 


^■■\ 




X : 









Table 1.8: Sub Device Classes for the 'Audio' Major Class 
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2 LINK MANAGER PROTOCOL (LMP) 



2.1 THE LINK MANGER VERSION PARAMETER 





••^ife^gr»ci:Ya 


VersNr 


0 


Bluetooth LMP 1.0, [2] 



Table 2. 1: The LMP Version Parameter Values 



2.2 THE LMP.COMPID PARAMETER CODES 

This is the parameter used in the LMP Version procedure. 





■Xion^ ;:;:|:p^i;:;:-,^;:;::::3 -y^Sk^'^'" :;-V?-;:V': "" St "': V:;:-.- 


0 


Ericsson IVIobile Communications 






2 


Intel Corp. 


3 




4 


Toshiba Corp. 


5* 65534; 




65535 


Unassigned. For use in internal and interoperability tests before a Company 
ID has been assigned. May not be used in products. 



Table 2.2: The LMP_ Compid parameter codes 
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3 LOGICAL LINK CONTROL AND ADAPTATION 
PROTOCOL (L2CAP) 

Please see Section 4.3 for assigned PSM values. 
3.1 CHANNEL IDENTIFIERS 









0x0000 


Illegal, should not be used 


[3] 


•■"tlxOpi^^^ ■:-)i§ff^^ 


^•!.l!2C AR ' sfgnaff trig pHainnieit;;: if 




0x0002 


L2CA connection less data 


[3] 


i'Oxo^ 







Table 3. 1: Pre-defined L2CAP Channel Identifiers 



3.2 PROTOCOL AND SERVICE MULTIPLEXOR (PSM) 









SDP 


0x0001 


[4] 








TCS-BIN 


0x0005 


[6] 




px6607 ;,; 





Table 3,2: Assigned Protocol and Sen/ice Multiplexor values (PSM) 
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4 SERVICE DISCOVERY PROTOCOL (SDP) 



4.1 UNIVERSALLY UNIQUE IDENTIFIER (UUID) SHORT 
FORMS 

The Bluetooth Service Discovery Protocol (SDP) specification defines a way to 
represent a range of UUIDs (which are nominally 128-bits) in a shorter form. A 
reserved range of 2^^ values can be represented using 32-bits (denoted 
uuid32). Of these, a sub-range of 2^'^ values can be represented using only 16- 

bits (denoted uuid16). Any value in the 2^^ range that is not assigned in this 
document is reserved pending future revisions of this document. In other 
words, no value in this range may be used except as specified in this or future 
revisions of this document. UUID values outside of this range can be allocated 
as described in [19] for any purpose the allocater desires. 

4.2 BASE UNIVERSALLY UNIQUE IDENTIFIER (UUID) 

The Base UUID is used for calculating 128-bit UUIDs from 'short UUIDs' 
(uuidie and uuid32) as described in the SDP Specification [4]. 







BASE_UUID 


00000000-OQOO-1000-8000-00805F9B34FB 
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4.3 PROTOCOLS 







.;;Nam0 ■ 




SDP 


uuid16' 0x0001^ 


sdp.bt 


[4] 


'^RF CdWA y ■': y : = ; • 


u liid 1 &' ' 0x0003 






TCS-BIN 


ULiid16' OxOOOS 


tr<! ht 


l"J 


: L2CAP;-'* 






; HI 


IP 


uuid16: 0x0009 






;ubp-.;;:--v|;-^U 








TCP 


uuid16: 0x0004 








uukJ16: 0x0006 . 


mod^ 




OBEX 


uuid16: 0x0008 


obex 




,FTp'y /" \- J'<:^\ 


um^BiOxCaOA:: 






HTTP 


uuid16: pxOOOC 


http 




wsp - V. ; 


uiM'^izdkOQOB^k. 


wsp-: 





Table 4. 7; Protocol Universally Unique Identifiers and Names 
1. 'Short UUID' 
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4.4 SERVICE CLASSES 



. 'Mnemonic 








ServiceDiscoveryServerServiceClassID 
J?rows0pr6u pD^st^fplprServfceGIa ■ 


uuid16: 0x1000 






PublicBrowseGroup 


uuid16: 0x1002 






;/S0jialPdrt:::..^^^ -^^'^iM^i 






: ;■ seiriiai; bt ■ ■■ 


LANAccessUsingPPP 


uuid16: 0x1102 






. DialupNebiVOi^ng; ■ 




[131 - .i 




IrMCSync 


uuid16: 0x1104 


[17] 






luu\d^^;:DxtW 






OBEXFileTransfer 


uuid16: 0x1106 






iriVIC3^«iCotnma 


uiJAdABzbxi^ 


■ I *■ *. i . :: :: 




Headset 


uuid16: 0x1108 






: :CottilessTBlephGii^ 


uiMI 6i 6xH09 






Intercom 


uuid16: 0x1110 


[11] 












HeadsetAud ioGateway 


uuid16: 0x1112 


[7] 




PnPlnfdirfeadGn ^^^■■flA; ''^^^ 








GenericNetworking 


uuid16: 0x1201 


n/a 




GeriericFt(eTjansf|^^^^^^ 


uukiiei: px?^^ 


■n/a- 




GenericAudio 


uuid16: 0x1203 


n/a 




tGerieriqlj^liephQ 









Table 4.2: Service Class Identifiers and Names 

1. If the specified Service Class directly and exactly implies a certain Profile, the Profile is 
indicated here (i.e. for concrete Service Classes). Leave empty for abstract Service 
Classes. 



The Profile column in Table 4.2 indicates which Service Class identifiers that 
also directly corresponds to a Bluetooth Profile. It is not allowed to use the Ser- 
vice Class UUID unless the service complies with the specified Profile. These 
UUIDs might also appear as Profile Identifiers in the 
BluetoothProfileDescriptorList attribute. 
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4.5 ATTRIBUTE IDENTIFIER CODES 









ServiceRecordHandle 
:';Semc8C!assipUs^^ 


0x0000 

•■;pxOoBi1^ 


[4] Bluetooth Service Discovery 
Protocol (SDP), Bluetooth SIG 


ServiceRecordState 


0x0002 






.0x0003 - 




Protoco 1 Descr i ptorList 
BrowseGtbiipList *:i;:::?;!;-.v; 


0x0004 

dxooosVjf: 




LanguageBaseAttributelDList 


0x0006 




Sei^ceinfc^tm^ 


•jxoo€7'"€;^^^^ 




ServiceAvailability 


0x0008 




BloetboithPr^ : 


: bx6£^p9^:-::jV::^^^^ 




DocumentationU RL 


OxOOOA 




CttentExecutaoleURL 


; OXOOOB . 




IconIO 


OxOOOC 






OxOOOPv;::: 




Reserved 


OxOOOE- 
0x01 FF 






•bxooootibt^^^^^^ 




ServlceDescription 


0x0001 + b 




■Piwidert^jafihef-^^^ 






Vers ion N um berList 


0x0200 




^ServicepatabaseStat6:=;:::-K^^^^^^^^^^^^ 






GroupID 


0x0200 




Remote audio volume control 


0x0302^ 


[7] 


Esd^rniirtbt^ 






Service Version 


0x0300 




■SupportiedD^^^ 






Supported Formats List ■.' ■ 







Table 4.3: Attribute Identifiers 
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Mn monic 


Attribute ID 


Ref renc 


.Fax ClasiS:;1:'Sup{i!9rtV:/.;^^^^ 






Fax Class 2.0 Support 


0x0303 




Fax Class^24uppprt 






Audio Feedback Support 


0x0305 





Table 4.3: Attribute Identifiers 

1. 'b' in this table represents a base offset as given by the LanguageBaseAttributelDList 
attribute. For the primary language, 'b' must be equal to 0x0100 as described In the 
SDP specification, 

2. Items in italic are tentative values in this version of the document. 



4.6 PROTOCOL PARAMETERS 



Protocol : j; : : 


- Psiranrater rhniem^ 




L2CAP 


PSM 


1 


TCPorUDJ^;;;/: 






RFCOMM 


Channel 


1 



Table 4.4: Protocol Parameters 



4,7 HOST OPERATING ENVIRONMENT IDENTIFIERS 

4.7.1 ClientExecutableURL substitution strings 

The operating environment identifier strings have the following format^: 

The general rule is that is that a new identifier should only be defined as 
required to differentiate inconnpatible operating environments concerning an 
executable file image. That Is, for example different <version>-tags should not 
be used for compatible versions of the same operating system. 



1 . It is based on a format used by the GNU AutoConfig tools 
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Currently defined tags: 







alpha 


Digital Alpha* compatible 




ARM*^^^ V ^-^■if^^'li-'y:^ ^* •:■ |- ' ' ^fe^ 


186 


Any Intel* 80x86-family compatible CPU 






jvm 


Java Virtual Machine* 


nnfi 








sh4 


Hitachi SH-4* compatible 




^SuniSpard^cbm :'i!--'Wy§^ 


Kernel ID 


Description 


Jchomsviinux;^ 
<os> 


An 'OS identifier' as listed below, might appear in the <kemel> field 
when the requested OS platform Is Java based. 




amigaos, beos4.5, ejava, epocc, epoce, epocq, epocs, gnu, jrel.1, jre1.2, macos, macosx, 
os2. os9, palmos, pjava. pjaval.1, photon, plan9, qnx, rtjava, wln95, wln98. wln2000, wince, 
winnt4 


Object Format Identj^rs^ i 


aout, bout, coff, elf, jar 




amlga*, apple*, be*, ericsson*, ibm*. Intel*, lucent*, nnicrosoft*, microware*, motorola*, 
nokia*, palm*, psIon*, qnx*, sun*, symblan*, toshiba*, unknown^ 



1. Only applicable when the object format is not otherwise uniquely implied by the 
identifier string. 

2. Use when no other applies. 
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Bluetooth. 



For Linux, the ^manufacturer' field may be used to indicate Linux distribution if 
so required (in which case <version> indicates the version of the distribution). 
Otherwise use 'unknown'. 



caldera. debian, dlx« doslinux, linuxpro, linuxware, mandrake, mklinux, redhat slackware, 
stampede, suse, turbolinux, yggdrasil 





i86-microsoft-win95 


ppc-apple-macos 


i86-redhat-linux-gnu6 




m68k-appt^rn#^«^ < 


; ppCrnrttdiftux-iini^ 


i86-microsoft-winnt4 


ppc-apple-macosx 




^alpha^microsoftwn 






i86-microsoft-win2000 


m68k-amiga-amigaos 




alfi>hai%icros©fl-wJ^ 


. ppc*aiRiiga*'3rni|F^ 




i86-be-beos4.5 


jvm-sun-jre1.2 




■ppc-;be^beos4;5 :- 






a rm-sy m bia n-epoc3 


jvm-sun-ejava 






jr0i^t^^ 




sh3-microsoft-wince 


ppoibm-vxworks-pjaval .2 




am^micrpsoft^wfh^^^^^ 


.^p^rCi^^unija^^ 
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4.7.2 Ic nURL substituti n strings 

The IconURL operating environment identifier strings have the following 
general format: 

The optional tag 'm' indicates monochrome or grayscale. The host is free to try 
to match/request any graphics file format as Indicated by a <file_fomiat> tag, 
however at a minimum files conforming to the Portable Network Graphic stan- 
dard [18] should be made available at the resulting URL (indicated by 

<file_format>=png)^. 







png 
bmp 


Portable Network Graphics [18] 
Windows bitmap 


Currently defined IconURL Icon format identifier strings: 


-'.ExssnplB Icon foniirat jEdenttf^^ 


32x32x8. png 

:';i^ii6xa:pngMlt:; 

16x1 6x1 m. png 
10x10x2^;p^ 


256 color 32 by 32 icon (or 255 colors + transparent) 
Black and white (or monochronne + transparent) 



2. The use of PNG, and whether a subset of PNG should be required, Is currently pending fur- 
ther investigation. 
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The ability to discover the capability of connecting devices or h 



^9 



Segnnentation and Reassembly 



smtetRr 
InfraRed Data Association 
Poi«t-t6^PQ|rit;|^r^^ 
Internet Engineering Task Force 



:Requesr F<;«i^^<w^ 



■■■■ --^^ 



Terms and Abbreviations 



29 November 1999 



1029 



BLUETOOTH SPECIFICATION Version 1.0 B page 1030 of 1082 

Bluetooth Assigned Numbers BlUBtOOtH 

7 LIST OF FIGURES 



Figure 1.1: General format of Class of Device/Service 1012 

Figure 1 .2: The Class of Device/Service field (format type 1) 1013 



1030 



29 November 1999 



List of Figures 



BLUETOOTH SPECIFICATION Version 1.0 B 



page 1031 of 1082 



Bluetooth Assigned Numbers 

8 LIST OF TABLES 



Table 1.1; The Inquiry Access Codes 1012 

Table 1 .2: Major Service Classes 1013 

Table 1.3: Major Device Classes 1014 

Table 1 .4: Sub Device Class field for the ^Computer' Major Class 1015 

Table 1.5; Sub Device Classes for the 'Phone' Major Class 1015 

Table 1.6; The LAN Access Point Load Factor field 1016 

Table 1.7: Reserved sub-field for the LAN Access Point 1016 

Table 1.8; Sub Device Classes for the 'Audio' Major Class 1017 

Table 2. 1 : The LMP Version Parameter Values 1018 

Table 2.2: The LMP.CompId parameter codes 1018 

Table 3.1: Pre-defined L2CAP Channel Identifiers 1019 

Table 3.2: Assigned Protocol and Service Multiplexor values (PSM) 1019 

Table 4,1: Protocol Universally Unique Identifiers and Names 1021 

Table 4.2: Service Class Identifiers and Names 1 022 

Table 4.3: Attribute Identifiers 1 023 

Table 4.4: Protocol Parameters 1024 



List of Tables 



29 November 1999 



1031 



BLUETOOTH SPECIFICATION Version 1.0 B page 1 032 of 1 082 



Bluetooth Assigned Numbers 



Bluetooth. 



1032 



29 November 1999 



List of Tables 



Appendix IX 




MESSAGE SEQUENCE CHARTS 



Betweek Host and Host Controller/Link Manager 



This |locum|nt shows examples of inter- 
worl|ng between HCI Commands and 
LM ^rotocofData Units in form of message 
seajaence cnarts. It helps to understand and to 
rectly u^e the HCI Commands. 



BLUETOOTH SPECIFICATION Version 1.0 B page 1034 of 1082 



Message Sequence Charts 



Bluetooth. 



1034 



29 November 1999 



BLUETOOTH SPECIFICATION Version 1.0 B 



page 1035 of 1082 



Message Sequence Charts 

CONTENTS 



1 Introduction 1037 

2 Services without connection request 1038 

2.1 Remote Name Request 1038 

2.2 One-Time Inquiry 1039 

2.3 Periodic Inquiry 1 040 

3 ACL connection establishment and detachment 1 042 

3.1 ACL Connection Request phase 1043 

3.2 ACL Connection Setup phase 1045 

3.2.1 Pairing 1045 

3.2.2 Authentication 1047 

3.3 Encryption and Connection Setup Complete 1047 

3.4 ACL Disconnection 1048 

4 Optional activities after ACL Connection establishment 1 050 

4.1 Authentication Requested 1050 

4.2 Set Connection Encryption 1051 

4.3 Change Connection Link Key 1 052 

4.4 Master Link Key 1053 

4.5 Read Remote Supported Features 1 055 

4.6 Read Clock Offset .1055 

4.7 Read Remote Version Information 1056 

4.8 QoS Setup... 1057 

4.9 Switch Role 1057 

5 SCO Connection establishment and detachment 1 059 

5.1 SCO Connection setup 1059 

5.1.1 Master activates the SCO Connection setup 1 059 

5.1 .2 Slave activates the SCO Connection setup 1060 

5.2 SCO Disconnection 1 060 

6 Special modes: sniff, hold, park 1062 

6.1 Sniff Mode 1062 

6.2 Hold Mode 1063 

6.3 Park Mode 1065 

6.3.1 Enter park mode 1065 

6.3.2 Exit Park Mode 1066 

7 Buffer management, flow control 1 068 

8 LoopbackM de 1070 

8.1 Local Loopback Mode 1070 

8.2 Remote Loopback Mode 1 072 



29 November 1999 



1035 



BLUETOOTH SPECIFICATION Version 1 .0 B page 1 036 of 1082 

Message Sequence Charts BlUGtOOtfl 

9 List of Acronyms and Abbreviations 1 073 

10 List of Figures 1074 

11 List of Tables 1075 

12 References 1076 



1036 



29 November 1999 



BLUETOOTH SPECIFICATION Version 1.0 B 



page 1037 of 1082 



Message Sequence Charts 

1 INTRODUCTION 



The goal of this document is to show the interworkings of HCI-Commands and 
LM-PDUs. It focuses on the message sequence charts for the procedures 
specified in [3] "Bluetooth Host Controller Interface Functional Specification" 
with regard to LM Procedures from [2] "Link Manager Protocol". 

We illustrate here the most useful scenarios, but we do not cover all possible 
alternatives. Furthermore, the message sequence charts do not consider the 
transfer error over Air Interface or Host Interface. In all message sequence 
charts it is assumed that all events are not masked, so the Host Controller will 
not filter out any events. 

Notation used in the message sequence charts: 

Box: 

• Replaces a group of transactions 

• Indicates the start of a procedure or a sub-scenario 

Note: in a message sequence chart where several sub-scenarios exist, the 
sub-scenarios can be executed optionally, consequently, exclusively or inde- 
pendently from each other. 

Hexagon: 

• Indicates a condifion that is needed to start the transaction below this 
hexagon 

Arrow: 

• Represents a message, signal or transaction 
Comment: 

• 7* . . . T indicates editor comments 



Bluetooth. 
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2 SERVICES WITHOUT CONNECTION REQUEST 



2.1 REMOTE NAME REQUEST 

The service Remote Name Request is used to find out the name of the remote 
BT Device without an explicit ACL Connection request. 

Sending an HCLRemote_Name_Request (BD_ADDR, Page_Scan_ 
Repetition_Mode. Page_Scan_Mode, Clock.Offset), the Host expects that its 
local BT Device will automatically try to connect to the remote BT Device (with 
the specified BD_ADDR). Then the local BT Device should try to get the name, 
to disconnect, and finally to return the name of the remote BT Device back to 
the Host (see Figure 2.1 Remote Name Request: sub-scenario 1). 

Note: if an ACL Connection already exists (see Figure 2.1 Remote Name 
Request: sub-scenario 2), the Remote Name Request procedure will be 
executed like an optional service. No Paging and no ACL Detachment need to 
be done. 
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Bluetooth. 




Host-A 




HC/LM-A 




HC/LM-B 



Host-B 



HCI_R9mot9,Name_R&quest 



(BD.ADDR. 
HCI Command Status gvent 



(Status, Num.Cmd, 
Cmd_OpCod9) 




r LMP_name_req/-res can 
be repeated several times 
dependent on the name 
length */ 



■Page" (ID-Packet) 



"Page Response" (ID-Packet) 



FHS (BD_ADDR. CoD, 



"FHS-Ack" (ID-Packet) 



LMP„name_req (offset) ^ 



LMP_name_res 



(offset name_tength, name.offeet) 



LMP_detach (reason) 



HCI Remote Name Request Complete event 



(Status, BD.ADDR, 
Remote_Namo) 



Sub-scenario 2: AGL Connection aire 



/* LMP_nanfie_re<V-ros 
can be repeated several 
times dependent on the 
name length V 



LMP_name_req (offset) 



LMP_name_res 



(offset name_longth, name_offset) 



HCI Remote Name Request Complete event 



(Status, BD.ADDR 
Remote.Name) 



Figure 2. 1: Remote Name Request 



2.2 ONE-TIME INQUIRY 

Inquiry is used to detect and collect nearby BT Devices. When receiving the 
command HCLInquiry (LAP, lnquiry_Length. Num_Responses), HC will start 
the baseband inquiry procedure with an Inquiry Access Code (derived from the 
specified LAP) and Inquiry Length. When Inquiry Responses are received, HC 
will filter out and then return the infomiation related to the found BT Devices 
using one or several Inquiry Result events (Num_Responses, BD_ADDR[I]. 
Page_Scan_Repetitlon_Mode[i]. Page_Scan_Period_Mode[i], 
Page_Scan_Mode[i]. Class_Of_Device[i]. Clock_Offset[i]) to the Host. 
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Bluetooth. 



The filtering of found BT Devices is specified in HCLSeLEvent_Filter 
(Filter_Type, Filter_Condition_Type, Condition) with the Filter_Type = Inquiry 
Result. When the Inquiry procedure is completed, Inquiry Complete event 
(Status, Num_Responses) must be returned to the Host. Otherwise, the com- 
mand HCLInquiry_Cancel( ) will be used to directly stop the inquiry procedure. 




Host-A 




HC/LM-A 
Master 



Slave - 1 



HCIJnquiry 



(LAP, lnq_Length, Num.Res) 
^ HCl Command Status event 



(Status, Num_Cmd, 
Cmd_OpCode) 





Slave - n 



-Siib^sc^narip 1 : Coll^ 



"Inquiry" (ID-Packet) ^ 
r Random 



HCl Inquiry Result event 



(Num.Ros, BO_ADDR[i), ..) 



Access 
O-1023 */ 

"Inquiry" (ID-Packet) 



"Inquiry" (ID-Packet) 



^ FHS (BD.ADDR, CoD, ..) 



"Inquiry" (ID-Packet) 



/' Randorr 



Access 



0-1023 */ 



FHS (BP ADDR, CoD, ..) 



/* 0 - n times */ 



Sal>aceriariQ 2r expHcjt stop using HCI_lnquiry_Cancel {) 



HCLInquiry.Cancel () 



HCl Command Complete event 



(Num_Cmd, Cmd_OpCode, 
Status) 



f* stop inquiry V 



i :Sub^scefiainp;3:stop^w^ 



HCl Inquiry Complete event 



(Status, Num_Res) 



Figure 2.2: One-Time Inquiry 



2.3 PERIODIC INQUIRY 

Periodic inquiry is needed when the inquiry procedure is to be repeated 
periodically. Receipt of the command HCLPeriodic_lnquiry_Mode 
(Max_Period_Length, Min_Period_Length, LAP, Inquiry.Length, 
Num_Responses) HC will start the periodic Inquiry Mode with the specified 



1040 



29 November 1 999 Services without connection request 



BLUETOOTH SPECIFICATION Version 1.0 B 



page 1041 of 1082 



Message Sequence Charts BlUCtOOth 

parameters Max_Period_Length, Min_Period_Length, lnquiry_Access_code 
(derived from LAP) and lnquiry_Length. As in the one-time Inquiry procedure, 
only BT Devices that are specified in the HCLSet_Event_Filter (Filter.Type, 
Filter_Condition_Type, Condition) with the Filter_Type = Inquiry Result will not 
be filtered out. Therefore, in the inquiry cycle, one or several Inquiry Result 
events (Num_Responses. BD_ADDR[i], Page_Scan_Repetition_ 
Mode[i], Page_Scan_Period_Mode[i], Page_Scan_Mode[i], Class_Of_ 
Device[i]. Clock_Offset[i]) and Inquiry Complete event (Status, 
Num_Responses) will be returned to the Host with one, or a list of. found BT 
Devices. The periodic Inquiry can be stopped using HCI_Exit_Periodic_ 
lnquiry_Mode( ). 




Host-A 




HCI_P9riodic_(nquiry_Mod9 



(Max_Period, Min_Period,7) 
. HCI Command Complete event 



(Num_Cmd, Cmd_OpCode, 
Status) 




Slave - 1 




Slave - n 



i:Subgs<:^narlo::1::;:Gpl[^^ 



HCI Inquiry R&sutt event 



(Num.Res, BD_ADDR(i], ..) 



■Inquiry' (ID-Packet) 



/* Random Access 
0-1023 V 

"Inquiry" (IP-Packet) 



'Inquiry* (ID-Packet) 



FHS (BD_ADDR. CoD. ..) 



"Inquiry" (ID-Packet) 



/' Random 



0-1023 '/ 



Access 



FHS (BdJaDDR. CoO. ..) 



/• 0 - n times V 



1 x : :::::: Li; Sub^ explicit exit Periodic Inquiry IVIode usihg HCIiiExit/lrKiuirylMode () v: 






HCI_Exit_Periodic_lnquiry_Mod©^ 

^ HCI Command Complete event 
(Num_Cmd, Cmd_OpCode, 
Status) 


/* stop periodic 
inquiry '/ 






1 Sub^scena^ : 




^ HCI Inquiry Complete event 
(Status, Num.Res) 









Figure 2.3: Periodic Inquiry 
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3 ACL CONNECTION ESTABLISHMENT AND 
DETACHMENT 



The overview of the ACL Connection establishment and detachment is shown 
in Figure 3.1 Overview of ACL Connection establishment and detachment. 



ACL-Connection-Request 



t. 

Page/PageRes 



Role Change 



Pairing 



Authentication 





Encryption 














Setup-Complete 










r 




Optional 
Activities 








f 


ACL-Disconnection 



Figure 3. 1: Overview of ACL Connection establishment and detachment 
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3.1 ACL CONNECTION REQUEST PHASE 

The ACL Connection Request phase is identified between the 
HCLCreate.Connection (BD_ADDR, Packet_Type, 
Page_Scan_Repetitlon_Mode, Page_Scan_Mode, Clock_Offset, 
Allow_Role_Switch) from the master side and the response from the slave side 
with rejection or acceptation on the LM level. Three altemative sub>-scenarios 
are shown in Figure 3.2, "ACL Connection Request phase," on page 1044. 

Sub-scenario 1: Slave rejects ACL Connection Request 

If the ACL Connection request is rejected by slave, a Connection Complete 
event (Status, Connection_Handle, BD.ADDR, Link_Type, Encryption.Mode) 
will be then returned to Host, whereby the Status will be 
copied from the Reason parameter of the command HCLReject_Connection_ 
Request (Reason, BD_ADDR). The parameters Connection_Handle and 
Encryption_Mode will be meaningless. 

Sub-scenario 2: Slave accepts ACL Connection Request 

When the slave responds with LMP_accepted ( ) correspondent to LMP_host_ 
connection_req ( ). the ACL Connection Request is accepted. The master will 
continue with the ACL Connection Setup, where pairing, authentication or 
encryption will be executed. 

Sub-scenario 3: Slave accepts ACL Connection Request with Role Change 

This case is identified when the slave sends an LMP_switch_req ( ) to initiate 
Role Change. If the master accepts, the baseband Master-Slave Switch will be 
executed. Thereafter, the ACL Connection Setup will continue. 

Note: on the slave side, an incoming connection request can be automatically 
accepted by using HCLSet_Event_Filter (Filter_Type. Filter_Conditlon_Type, 
Condition) with the Filter_Type = 0x02 /*Connection_Setup*/. 
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Bluetooth. 




Host-A 




hc/lM-a 



HCI_Create_Connection 



(BD.ADDR. Packet.Type, ..) ' 
, HCI Command Status event 



(Status, Num.Cmd. 
Cmd_ Opcode) 

/- Master-Role V f 




HC/LM-B 




Host-B 



. f^ge and: Page Response^^:' 



r Slave-Role 7 



LMP_hQst_connection_feq () 



HQ Connection Request event , 



(BD.ADDR. CoD. 
Link_Type=ACL) 



::$ub-scenariQ: I 'lHostrSi rejects the ACt: Conn 





LMP_not_accepted 




(opcode, reason) 




LMP_detach (reason) ^ 




r ARQ-Ack '/ 


^HCI Connection Complete event 




(Status=Host Rejected, ..) 





. HCL Re ject_Connection_ Request 



(Status=Host Rejected. 8D_ADD/^) 
HCI Command Status event 



(Status. Num.Cmd, 
Cmd.OpCode) 



HCI Connection Complete event ^ 



(Status=Host Rejected. ..) 



LMP, accepted (opcode) 



^HCLAccept_Connectk)n_Request 



(BD.AOOR. Role-Slave) 
HCI Command Status event 



(Status, Num_Cmd, 
Cmd_ Opcode) 



: Sub-sbenarlo; 3; Host^acc^ 



LMP_stot_offset 



(slot.offset, BO.ADDR) 
^ LMP_switch_req () 



; If (Atovi^ ■ 1; 



LMP_ accepted (opcode) ^ 



^ HCI_Accept_Connection_Request 

^ /an Anns DaLb— 



(BD_ADDR, Rote=Master) 
HCI Command Status event 



(Status, Num_Cmd, 
Cmd_OpCode) 



for;<letaHs;s^ 



r Slave-Role V 
HCI Role Change event 



(opcode=t^P_hosLconnection_reqJ 



(BD.ADOR. New_Role=Slave) 



LMP,accepted 



r Master-Role V 



HCI Rote Change event 



(BD_ADDR, 
New_Role=Master) 



Figure 3.2: ACL Connection Request phase 
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3.2 ACL CONNECTION SETUP PHASE 

If the ACL Connection Request phase was successful, the ACL Connection 
Setup phase will start, with the goal of executing security procedures like pair- 
ing, authentication and encryption. The ACL Connection Setup phase is suc- 
cessfully finished when LMP_setup_complete ( ) is exchanged and the 
Connection Complete event (Status=OxOO, Connection_Handle, BD_ADDR, 
Link„Type. Encryption_Mode) is sent to the Host. 



3.2.1 Pairing 

If authentication is required and the BT Devices to be connected don't have a 
common link key, the pairing procedure on LM Level will be executed using the 
PIN Input from Host. During the pairing, the authentication- and link key cre- 
ation procedures will be done. Note: the created Link Key can be stored either 
in the BT Device or in the Host. 
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Bluetooth. 



Host-A 




HC/LM-A 
Master 



T 



AGll: Connection^ Request establish 



LMP,features,req (features) 



LMP_features_fe9 {features) 



If (AumiiEnable==1 



^ HCI Link Key Request event 



HCI. 



(BD_ADOR) 
. Link_ Key_ Request. Negative. Re ply , 



User's 
PIN- 
Input 



(BD_AODR) 
HCI Command Comptete event 



(Num.Cmd. Cmd.OpCode. Status) 



(f no Link; Key from Hwt l : 
=> PtN requirect.; 



HCI PIN Code Request event 



(BD_ADDR) 



HCLPIN,Code_Request_Reply ^ 



(BD.ADDR, PIN_Length, PIN) 
HCI Command Complete event 



(Num.Cmd. Cmd.OpCode, 
Status) 



r Mutual Authentication 
based on the In it-Key '/ 



r Mutual Authentication 
based on the new 
combination key */ 

HCI Link Key Notification event 



(BD.ADDR. Unk.Key) 



LMP_in_rand (rand.nr) 



LMP_accepted (opcode) 



LMP„au„rand (rand.nr) 



LMP_sre3 (auth.res) 



LMP_au_rand (rand_nr) 



LMP^sres (auth^res) 



LMP„comb_tey (rand.nr) 



LMP_ comb, key (rand.nr) 



LMP,au_rand (rand^nr) 



LMP_sres (auth.res) 



LMP_au_rand (rand_nr) 



LMP_sres (auth.res) 



HCI PIN Code Request event 



(BD.ADDR) 
. HCLPIN_Code,Request^Reply 



(BO.ADOa PIN.Length. PIN) 
HCI Command Comptete event ^ 



(Num_Cmd, Cmd_OpCode, 
Status) 



HCI Link Key Notification event 



(BD.ADDR, Unk.Key) 



User's 
PIN- 
Inpirt 



Figure 3.3: ACL Connection setup with pairing 
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Bluetooth. 



If a common link key already exists between the BT Devices, pairing is not 
needed. Note: a Link Key created during pairing can be stored either in the BT 
Device or in the Host. If the parameter Authentication_Enable is set, the 
authentication procedure has to be executed. Here, the MSG only shows the 
case when Authentication_Enable is set on both sides. 




HC/LM-A 
Master 



/* Auth_Enable = 1 V 




HC/LM-B 
Slave 



r Auth_Enablo = 1 V 



Host-B 



_L 




jiAGti^Gpnnectipn^R 



LMP_featur8s_req (features) 



^ LMP_features_res (features) 



:lf(Auth^Enabte==^1)AND{Uhk 

|: liTii.ssedj =>;^U nequinsd 0 



HCI Link Key Request event 



(BD.ADDR) 
HCLLInk_Key_Request_Reply 



(BD_ADDR, Link_Key) ^ 
, HCI Comnr^nd Complete event 



(Num_Cmd, Cmd_OpCode, 
Status) 



iif(ALi|ttii 



HCI Link Key Request event 



(BD.ADDR) 



^ HCI_Link_Key_Request_Reply 
^ (BD_ADDR, Link_Key) 



HCI Command Complete event ^ 
(Num_Cmd, Cmd_OpCod6, ^ 
Status) 



Authenticatioh ; 





LMP_au_rand (rand_nr) 






LMP_sres (auth.res) 


-> 




LMP_au_rand (rand_nr) 






LMP^sres (auth_res) 







Figure 3.4: ACL Connection setup with authentication 



3.3 ENCRYPTION AND CONNECTION SETUP COMPLETE 

Once the pairing/authentication procedure is successful, the encryption proce- 
dure will be started. Here, the MSG only shows how to set up an encrypted 
point-to-point connection (Encryption_Mode = 1 /*point-to-point/). Note: an 
encrypted connection requires an established common link key. 
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Bluetooth. 



Host-A 





HC/LM-A 
Master 



' Encr_Mods=Poin{-iO-Poini V 




Host-B 



r Encr_Mod6=Point-to-Point '/ 

JL 




Pairing/AiJthenticatibn finisheid;:; 



Ehcryptipn 



LMP_encryption,mode_req ^ 
(encr_mode) 
^ LMP_accepted (opcode) 



LMP_ encryption. key_size_req 



(key_size) 
LMP_accepted (opcode) 



LMP„start_encryption_req 



(rand_nr) 
LMP_accepted (opcode) 



, HCI Connection Complete event 



'(Status=:OxOO, ConHandle, BD_ADDR, ..) 



AGL Setup Complete 



LMP,setup_compiete () 



LMP_setup_complete () 



HCI Connection Complete event ^ 
(Status=OxOO, ConHandle, BD.ADDR, ..) 



Figure 3.5: Encryption and Setup complete 



3.4 ACL DISCONNECTION 



At any time, an established ACL Connection can be detached by an 
HCLDisconnect (Connection_Handle, Reason). If one or several SCO 
Connections exist, they must first be detached before the ACL Connection can 
be released. 

Note: the disconnection procedure is one-sided and doesn't need an explicit 
acknowledgment from the remote LM. So the ARQ Acknowledgment from the 
LC is needed, to ensure that the remote LM has received the LMP_detach 
(reason). 
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Bluetooth. 



Host-A 




HC/LM-A 




HC/LM-B 




:v ACL Conriectibn establlshiscl:: 



HCI_ Disconnect 



(ConHandle, Reason) 
HCI Command Status Event 



(Status, Num_Cmd. 
Cmd.OpCode) 



/' ARQ-Ack V 
, HCI Disconnection Complete event 



LMP.detach (reason) 



Host-B 




HCI Disconnection Complete event , 



(Status^OxOO, ConHandle, Reason) 



(Status^OxOO, ConHandle', Reason) 



Figure 3.6: ACL Disconnection 
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4 OPTIONAL ACTIVITIES AFTER ACL CONNECTION 
ESTABLISHMENT 



4.1 AUTHENTICATION REQUESTED 

Authentication can be explicitly executed at any time after an ACL Connection 
has been established. If the Link Key was missed in HC/LM, the Link Key will 
be required from the Host, as in the authentication procedure (see 3.2.2). 

Note: if the HC/LM and the Host don't have the Link Key a PIN Code Request 
event will be sent to the Host to request a PIN Code for pairing. A procedure 
identical to ACL Connection Setup with Pairing (see 3.2.1) will be used. 



Host-A ■ HC/LM-A ■ HC/LM-A ■ Host-B ■ 

V* V V 



HCLAuthentication_Requested 



(ConHandle) 
HCI Command Status event 



(Status, Num_Cmd, 
Cmd.OpCode) 



If Link Key missed i; 
=>: Link Key request to Host 



^ HCI Link Key Request event 

(bdIaddr) 

HCLLink_Key„Request, Reply ^ 
{BD_ADDR. Link_Key) ^ 

^ HCI Command Complete event 



(Num_Cmd, Cmd_OpCode, 
Status) 



HCI Authenticatjon Complete event 



(Status=OxOO. ConHandle) 



LMP_au_rand (rand_nr) 



If Unk K^ missed ; 

:i=>i;j|iihk^^ to Most :• 



LMP_sres (auth_res) 



HCI Link Key Request event ^ 

(bdIaddr) ^ 

^ HCLLink,Kfly_Request,Reply 



(BD_ADDR, Link_Key) 



HCI Command Complete event 
(Num_Cmd, Cmd_OpCode, 
Status) 



Figure 4. 1: Authentication Requested 
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4,2 SET CONNECTION ENCRYPTION 

Using the command HCLSet_Connection_Encryption (Connection_Handle, 
Encryption_Enable). the Host is able to switch the encryption of a connection 
with the specified Connection_Handle to ON/OFF. This command can be 
applied on both the master- and slave sides (only the master side is shown in 
Figure 4.2 Set Connection Encryption). If this command occurs on the slave 
side, the only difference is that LMP_encryption_mode_req (encryption_mode) 
will be sent from the HC/LM Slave. LMP_encryption_key_size_req (key_size) 
and LMP_start_encryption_req (rand_nr) will still be requested from the HC/LM 
master. 
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Host-A b I HC/LM-A L 

I Master I 



HC/LM-B 
Stave 




^^^^^ 



ACLConnection estaWlshedi 



Sub^sceiTa 



HCLS9t_Connection,Encryption^ 



(ConHandle, Encr_Enable=ON) 
^ HCI Command Status event 



(Status, Num_Cmd, 
Cmd.OpCode) 



, HCI Encryption Change event 



(Status=OxOO, ConHandle, 
Encr_Enable=ON) 



LM P_9ncryption_mode_req 



(encr_mode) 
LMP_acc6pt9d (opcode) 



LMP_encryption_key_size_req , 



{key_size) 
^ LMP_accepted (opcode] 



LMP_start_encryption_req 



{rand_nr) 
LMP^accepted (opcode) 



HCI Encryption Change event ^ 



(Status^OxOO, ConHandle, 
Encr_Enable=ON) 



: Sub-SQenarioi2: SetCoriheptiOT 



HCI_Set_Connection_ Encryption | 



(ConHandle, Encr_Enable=OFF) 
HCI Command Status event 



(Status, Num_Cmd, 
Cmd.OpCode) 



^ HCI Encryption Change event 



(Status=OxOO, ConHandle, 
Encr_Enable=OFF) 



LMP_encryption_mode_req 



(encr_mode) 
LMP.accepted (opcode) 



LI\/IP_stop_encrypton_req () 



LMP_accepted (opcode) 



HCI Encryption Change event ^ 



(Status=OxO0, ConHandle, 
Encr_Enable=OFF) 



Figure 4.2: Set Connection Enayption 



4.3 CHANGE CONNECTION LINK KEY 

Using the command HCLChange_Connection_Link_Key 
(Connection_Handle). the Host can explicitly change the common link key 
shared between the BT Devices. 
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Note: if the connection encryption was enabled and the temporary link key was 
used, it is the task of the BT Master to automatically restart the encryption (first 
stop and then restart) after the link key is successfully changed. 



Host-A 




HC/LM-B 




Host-B 




;A6L Connection :estabtisKed> 



HCl_Change,Connection_Unk_KBy^ 



(ConHandle) 
HCI Command Status event 



(Status, Num_Cmd, 
Cmd.OpCode) 



/* Mutual Authentication 
based on the new 
combination key V 

■ HCI Link Key Notification event 



(BD_ADDR, Link_Key) 



LMP_comb_key (rand_nr) 



LMP,comb_key (rand_nr) 



LMP„au_rand (rand_nr) 



LMP_sres (auth_f9s) 



LMP_au„rand (rand_nr) 



LMP_sres (auth,res) 



HCI Link Key Notification event > 



(BD_ADDR, Link.Key) 



:;.lfXEirK;t:fn#bl6= 

: Key ■ usecfl :=r>r restart e 



LMP_stop_encryption_req () 



^ LMP_accepted (opcode) 



LMP_start_encryptlon_req 



(rand_nr) 
LMP^accepted (opcode) 



^ HCI Change Connection Link Key Complete event 
(Status=OxOO, ConHandle) ^ 



Figure 4.3: Change Connection Link Key 



4.4 MASTER LINK KEY 

The Figure 4.4 Master Link Key shows how the Host can explicitly switch 
between the temporary Link Key and the semi-pennanent Link Key. Since this 
command can only be used for the BT Master, the Link Key switch will affect all 
connections. 

Note: if encryption was enabled, it is the task of the BT Master to restart the 
encryption separately for each slave. 
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Bluetooth. 



Host-A 




HC/LM-A 
Master 




HC/LM-I 
Slave 




ACL -Gonrtectton estiaWishedi: 



SUb-scehario 1: Switch frpmjSemi-pe l^yto M^terUnk Key ■ 



HCLMaster_Link_K8y 



(Key_F!ag=0x01/*Master-LK*/) ' 
^ HCI Command Status event 



(Status, Num_Cmd, 
Cmd_OpCode) 



LMP_temp,rand (rand_nr) 



LMP_temp_key (rand,nr) 



lf(EhcrEnal)le==dN);: 
m =p?': fBstart;.encryp^ 



LMP„stop_encryption_req () ^ 
J LMP,accepted (opcode) 



LM P,start_encryption_req 



(rand_nr) 
LMP_accepted (opcode) 



HCI Master Link Key Complete ev ent 
'(Status=OxOO, ConHandle. Key.Flag) 



HCI 

(Status=OxOO, ConHandle, Ksy_Flag)' 



Master Link Key Complete event . 



j Sub-sc€ihari6: 2; Switch fi^i Master Link Key- to Semi-permarierift Link Key 



HCI_Master_Link,Key 



(K6y_Fiag=0xOOrSemi-P©rmanent-LK*/) 
HCI Command Status event 



(Status, Num_Cmd, 
Cmd_OpCode) 



LMP.use_semi_permanenl_key () ^ 



^ LMP_accepted (opcode) 



:;;lf;:(Eria^ 



LMP_ 



^ HCI Master Link Key Complete ey ent 
^ (Status=0xO0, ConHandle, Key.Flag) 



HCI Master Link Key Complete event ^ 
(Slatus=OxOO, ConHandle, Key_Flag)^ 



Figure 4.4: Master Link Key 
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Bluetooth. 



4.5 READ REMOTE SUPPORTED FEATURES 



Using the command HCLRead„Remote„Supported_Features 
(Connection_Handle) the supported LMP Features of a remote BT Device can 
be read. These features contain supported packet types, supported modes, 
supported audio coding modes, etc. 

Note: if the LMP Features was exchanged during ACL Connection Setup, the 
HC/LM A may return the Read Remote Supported Features Complete event 
(Status, Connection.Handle, LMP.Features) without exchange of LMP PDUs. 



Host-A ■ HC/LM-A ■ HC/LM-B ■ Host-B ■ 

V V V V 



ACt Conne^ 



HCLR8ad,Remote_Supported_F9atur83 , 



(ConHandle) ' 
HCI Command Status event 



(Status, Num_Cmd, 
Cmd_OpCode) 



LMP_features_req (features) 



LMP_features_res (features) 



^ HCI Read Remote Supported Fe atures Complete event 
^(Status=0xOO. ConHandle, LMP_ features) 



Figure 4.5: Read Remote Supported Features 



4.6 READ CLOCK OFFSET 



Using the command HCLRead_Clock_Offset (Connection^Handle) the BT 
Master can read the Clock Offset of the BT Slaves. The Clock Offset can be 
used to speed up the paging procedure in a later connection attempt. If the 
command is requested from the slave device, the HC/LM Slave will directly 
return a Command Status event and an Read Clock Offset Complete event 
without exchange of LMP PDUs. 
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Bluetooth. 



Host-A 




<: 



HC/LM-A 
Master 




HC/LM-B 
Slave 




: AGL Connection established; 



HCLR©ad_Ctock_Offset 



(Con Handle) 
HCI Command Status event 



(Status, Num_Cmd, 
Cmd_OpCode) 



LMP_dkoffs6t_req () 



LMP_dkoffset_res 



{clock_offset) 



^ HCI Read Clock Offset Complete event 
(Status=OxOO, Con Handle, Clockloffset) 



Host-B 




> 



Figure 4.6: Read Clock Offset 



4.7 READ REMOTE VERSION INFORMATION 

Using HCLRead_Remote_Version_lnformation (Connection_Handle) the ver- 
sion information consisting of LMP_Version, Manufacturer_Name and 
LMP^Subversion from the remote BT Device can be read. 



Host-A 




HC/LM-A 




HC/LM-B 




ACL Connection: established ■ 



HCLRQad_Remote_Version_lnformation> 



(ConHandle) 
HCI Command Status event 



(Status, Num_Cmd, 
Cmd_OpCode) 



LMP_version_req 



(VersNr, Compid, SubVersNr) 
^ LMP_verslon_res 



(VersNr, Comptd, SubVersNr) 



^ HCI Read Remote Version Infornj atlon Complete event 
^(Status=OxOO, ConHandle, LMP. Version, ..) 



Host-B ■ 



Figure 4.7: Read Remote Version Information 
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4,8 QOS SETUP 



Bluetooth. 



To set up the Quality of Service, the command HCLQoS„Setup 
(Connection_Handle, Flags, Service_Type, Token_Rate, Peak.Bandwidth, 
Latency, Delay_Variation) is used. 



Host-A 




HC/LM-A 




HCl_QoS_Setup 



(ConHandle, Flags, Servioe.Type, ..) 
^ HCI Command Status event 



(Status, Num_Cmd, 
Cmd_OpCode) 



. HCI QoS Setup Complete event 



\Status=OxOO, ConHandle, Flags, 



LMP_quality„of_service_req 



(polLinterval, N,bc) 
^ LMP_accepted (opcode) 



Host-B 




HCI QoS Setup Complete event > 



(Status=0xO0, ConHandle, Flags, TT 



Figure 4.8: QoS Setup 



4.9 SWITCH ROLE 



The command HCLSwitch_Role (BD.ADDR, Role) can be used to explicitly 
switch the current role of the local BT Device for a particular connection with 
the specified BT Device (BD.ADDR). The local HC/LM has to check whether 
the switch is performed or not. 
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Bluetooth. 



^ ^ ^ 




Host-B 



ACL Conihectibn establislied ' 



r Master-Role '/ 



HCI_Switch„Role 



:;:SufcHS09n;3rio1: 

M^stertVSIave SwitcK^^;:^::; ; !; 



(BD_ADDR, Role=Slave) ' 
HCI Command Status event 



(Status, Num_Cmd, 
Cmd^OpCode) 



/* Master-Role 



LMP_switch,req () 



LMP_slot_offeet 



(slot_offset, BD_ADDR) 
^ LMP_accept8d (opcode) 



/* Slave-Role V 



: -iV ■ Slave'. SWitcft^^ 



LMP_slot_offeet 



{slot_offset, BO.ADDR) 
LMP.swrtch.req Q 



LMP_accepted (opcode) 



/* Slave-Role V 



HCl_Swrtch_Role 



' (BD.ADDR. RolesMaster) 
HCI Command Status event 



(Status, Num_Cmd, 
Cmd_OpCode) 



'•• ; Master/Slave Switch : :' ' • 
:;(commbri for sub^scenarto 1 and 2) 



/* Slave-Role */ 
HCI Role Change event 



TDD-Switch . 



FHS (BD.ADDR, CoD, 



"FHS-Ack" (ID-Packet) 



^ Use new channel pameters . 



(Status=OxOO, BD_ADDR, New_Role=Slave) 



/* Master-Role */ 
HCI Role Change event 



(Status=0xOO, BD_ADDR, New_Role=Master) 



1> 



Figure 4.9: Switch Role 
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5 SCO CONNECTION ESTABLISHMENT AND 
DETACHMENT 



5.1 SCO CONNECTION SETUP 

SCO Connection setup requires an established ACL Connection. It is the task 
of the Host to create an ACL Connection first and then the SCO Link. 

Note: On the slave side, an incoming connection request can be automatically 
accepted by using HCLSet_Event_Filter (Filter_Type, Filter_Condition_Type, 
Condition) with the Filter_Type = 0x02 rConnection_Setup*/. Furthermore, for 
each SCO Link to a BT Device, a separate SCO Connection Handle is needed. 

5.1 .1 Master activates the SCO Connection setup 

To set up an SCO Connection, the HCLAdd_SCO_Connection 
(Connection_Handle. Packet_Type) command is used. The specified 
Connection_Handle is related to the ACL Connection that must have been cre- 
ated before the HCLAdd_SCO_Connection is issued. 





1 k 1 "«".r i 1 "gr k 1 k 




HCI_Add_SCO_Conn©ction ^ 
(ACL_ConHandlo, Packet.Type) 

^ HCI Command Status event 
(Status, Num_Cmd, 
Cmd_OpCode) 

^ HCI Connection Complete event 


LMP_sco_link_req 
(SCO_handle, tming_contral_flags, .j 

^ LMP_ accepted (opcode) 


HCI Connection Request event ^ 
[BD.ADOa CoD. Unk.Typ^SCOr 

^ HCI_Acc8pt_Connection_ Request 
^ (BD_ADDR, Role) 

HCI Command Status event ^ 
(Status. Num_Cmd, 
Cmd_OpCode) 

HCI Connection Complete event ^ 




lStatus=OxOO, SCO.ConHandle, ..) 


(Status=OxOO, SCO_ConHandle, ^) 



Figure 5, 1: SCO Connection setup (activated from master) 
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5.1.2 Slave activates the SCO C nnecti n setup 

The same command HCLAdd_SCO_Connection (Connection_Handle. 
PackeLType) can be used to create an SCO Link when the local BT Device is 
a BT Slave. Here the specified Connection_Handle belongs to the established 
ACL Connection between the BT Devices. Compared to 5.1.1, the only differ- 
ence is that the HC/LM Slave starts the SCO Setup with LMP_sco_link_req 
first. 











ACL Connection established 




> 








^ HCl_Add_SCO_Connection 










^ (ACL_ConHandle\ Packet_Type) 










HCI Command Status event ^ 








^ LMP_sco_link_req (..) 


(Status, Num_Cmd, 
Cmd_OpCode) 






^HCI Connection Request event 










(BD_ADDR, CoD, Unk_Type=SCO) 










HCI_Accep(t_Connection_Roquest ^ 










(BD_ADDR, Role) ^ 










^ HCI Command Status event 










(Status, Num_Cmd, 
Cmd^OpCode) 


LMP_sco_link_req (..) ^ 










^ LMP_accepted (opcode) 








^HCI Connection Complete event 




HCI Connection Complete event ^ 






^(Stalus=OxOO, SCO_ConHandte, ..) 




(Status=OxOO, SCO.ConHandle, ..)^ 





Figure 5.2: SCO Connection setup (activated from slave) 



5.2 SCO DISCONNECTION 

An established SCO Connection can be detached at any time. Since several 
SCO Connections can exist between a BT Master and a BT Slave, an SCO 
Disconnection only removes the SCO Link with the specified SCO Connection 
Handle. The other SCO Connections will still exist. 
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Bluetooth. 





Host*A ■ HC/1 


.M-A ■ HC/LM-B ■ Host-B ■ 






ACL. Connection established 




> 




HCLDisconnoct ^ 










(SCO.ConHandIo, Reason) 
^ HCI Command Status event 










(Status, Num_Cmd. 
Cmd_OpCode) 


LMP_remove_soo_link_req ^ 










(SCO.handle) ^ 
^ LMP_accepted (opcode) 








^ HCI Disconnection Complete evenl 




HCI Disconnection Complete event ^ 






^{Status=OxOO, SCO.ConHandle, ..) 




(Status=0)cOO. SCO.ConHandle, ..) 





Figure 5.3: SCO Disconnectior) 
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6 SPECIAL MODES: SNIFF, HOLD, PARK 



Entry into sniff, hold or park mode requires an established ACL Connection, 
The following table summarizes the modes and the BT Role that can request, 
force, activate or exit the modes. 











Request 


Master/Slave 


Master/Slave 


Master/Slave 


■ Fbrce. ■ 




Master/3!ave ; • 




Activation 


Master 


Master/Slave 


Master 



Table 6. 1: Summary of modes (Sniff, Hold, Park) 



6.1 SNIFF MODE 

Sniff Mode is used when a slave shall participate in the piconet only in a sniff 
interval. For the Sniff Mode negotiation, the Host specifies the 
Sniff_Max_lnterval and the Sniff_Min_lnterval so that HC/LM will be able to 
choose the one sniff interval in this range. The used command is 
HCI_Sniff_Mode (Connection_Handle. Sniff_Max_ Interval, Sniff_Min_lnterval, 
Sniff_Attempt, Sniff_Timeout). 

Since Sniff Mode is a periodic mode, the command HCLExit_Sniff„Mode 
(Connection_Handle) is needed to return to Active Mode, 
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Bluetooth. 



Host-A ■ HC/LM-A ■ HC/LM-B ■ Host-B ■ 

^ v 

<1 . . ' ACL Connection established t: v - . . . : : \ ^>> 



HCl_Sniff_Mode 



(ConHandle, Sniff_Max_lnterval, ..) ' 
HCI Command Status event 



(Status, Num.Cmd, 
Cmd.OpCode) 



r AsMaster V 



r A=MastGr 
or Slave */ 



SubrBcermri6:;:1^ Mastw forcies jSlave inc 



LMP.sntff 



(timing_controLflags, D_sniff, ..y 



; Sub-sc€>nario; 2: ;Ma[Ste^ 

reiquests.SnJfflMode; '-^^^^^Cj 



LMP_sniff_req 



(timing_control_flags, D_sniff, . 
^ LMP^accepted (opcode) 



: Sniff ^/kxJe Started;: 



/• B=SIave '/ 



/' B=Slave 
or Master */ 



HCI Mode Change event 



'(Stalus=OxOO. ConHandle, Cunwit Mod6=Sniff, „) 



HCI Mode Change event ^ 

4 KM I t>^:£l \^ 



(Stalus=OxOO, ConHandte, CurTent_Modo=Snifl, ..) 



Sul>-scenario 3: Exit Sniff Mode 



HCl_Exit_Sniff_Mode 



(ConHandle) 
HO Command Status event 



(Status, Num_Cmd, 
Cmd.OpCode) 



HCI Mode Change event 



LMP_unsniff_req () 



LMP_accepted (opcode) 



(Status=OxOO, ConHandle, Current Modo=Active, ..) 




HCI Mode Change event 



(Status=OxOO, ConHandle, Current_Mod6= Active, ..)" 



Figure 6.1: Sniff Mode 



6.2 HOLD MODE 

Hold Mode is useful when a BT Device doesn't want to participate in the 
connection for a Hold Mode Length. Using the command HCLHold.Mode 
(Connection.Handle, Hold_Max_Length, Hold_Min_ Length), The Host speci- 
fies the Hold_Max_ Length and Hold_Min_ Length. The HC/LM will then be able 
to negotiate a Hold Mode Length in this range. When the hold mode is started 
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Bluetooth. 



or complete, Mode Change event (Status, Connection. 

Handle, Cun^ent.Mode, Interval) will be used to inform the Host about the 

actual mode. 

Note: the Hold Mode is exited when the Hold Mode Length has expired, so it is 
no guarantee that the remote BT Device is immediately active. 




HC/LM-B 




Host-B 




AC L.Cohrvectlor> established 



HCLHold_Mode 



(ConHandle, Hold_Mode_MaxJnterval, 
HCI Command Status ©vent 



(Status, Num_Cmd, 
Cmd_OpCode) 



/* A=Master V 



Sub^-scerTailp 1 ' Masterfbrces; Hold Mode 



LMP_hold (hold_time) 



/* B=Slave */ 



/* A=siave */ i Sub^sceharfo 2: Stave; for^^^ Hbtd Mode /* B=Master */ 



or Slave */ 



LMP_hold (holdjime) 



LMP_hold (holdjime) 



/• A=Master SUfc^SCenario 3: Master Of /* B=Slave or 



^ LMP_hold_req (hold„time) ^ 



^ LMP_accepted (opcode) ^ 



Master V 



Hold Mode started ;: 



HCI Mode Change event 



(Status=OxOO, ConHandle, Current_Mode=Hold, ..) 



HCI Mode Change event 



(Status^xOO, ConHandle, Cunwt_Mode=Ho(d, 



< ^ :■ : : : Holdi Modc ipdfriplet^ ^ 



^ HCI Mode Change event 



(Status=sOxOO, ConHandle, CurTent_Mode=Active, ..) 




HCI Mode Change event ^ 



(Status=OxOO, ConHandle, Cufrent_Mode=Active, ..) 



Figure 6.2: Hold Mode 
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6.3 PARK MODE 

Park Mode is used to render the slaves inactive but still synchronized to the 
master using the beacon interval. In park mode, broadcast is performed, 

6.3.1 Enter park mode 

Using the command HCLPark_Mode (Connection_Handle, 
Beacon_Max_lnterval, Beacon_Min_lnterval) the Host specifies the 
Beacon.Max. Interval and Beacon_Min_lnteival so that HC/LM can set up a 
Beacon-lnten/al in this range for the BT Slaves. In Park Mode, the BT Slave 
gives up its AM_ADDR. 
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Bluetooth. 



Host-A ■ HC/LM-A ■ HC/LM-B ■ Host-B ■ 

<< ■ . :;.-./. ■■ .: 'i;: - - . ■ - : ACL Connectlon ! established :• ; : " v.. ^ >> 

HCl_PafK_Mode ^ 



HCl_Pari(_Mode 



(CbnHandle, Beacon_MaxJntervai, 1)^ 
HCI Command Status event 



(Status, Num_Cmd, 
Cmd.OpCode) 



/* A=MasterV 



/* A=Master */ 



SUb-^ertanoiil : Master fbrci&s Slave ■ jrito Park Mocfe | r B=!Siave *i 



LMP.park 



{timing_control_flags, D_b, ..) 



Sub^scenario 2: Maister requeste : Slave int^ Mode | /* B=siave 7 



/• A=Slave 7 



LMP_park,req () 



^ LMP_accepted (opcode) 



LMP.park 



(timing_controLflags, D_b, ..) 



Sub^enario 3: Slave requeste to be put; into Park Mbdie | i* B=Master \ 



LMP,park_req () 



LMP_park 



{timing_control_flags, D_b, ..) 



Park Mode started 



HCI Mode Change event 



(Status«OxOO, ConHandle, Current_Mode=Park, ..) 



/* A=Master7 



HCI Mode Change event 



(Status=OxOO, ConHandle, Current^Mode^Park, . 
i Optic^^pMi A^ /* 8=Slave 7 



LM P_set_broadcast_scan_wtndQWfc 



{timing_control_flags, D_b, ..) 
LMP_mod(fy_beacon 



(timlng_controLflags, D_b, „) 



Figure 6,3: Enter Park Mode 



6.3.2 Exit Park Mode 

Since Park Mode is a periodic mode, the command HCLExit_Park_Mode 
(Connection_Handle) will be used to return to Active Mode. A parked BT Slave 
can send an Access_Request_Message to request to leave the Park Mode. 
It is the task of master HC/LM to use LMP_unpark_PM_ADDR_req (..) or 
LMP_unpark_BD_ADDR_req (..) to unpark a BT Slave. 
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Bluetooth. 



Host-A 




HC/LM-A 




HC/LM-B 




ACL; Connection established : 



HCLExit_Park_Mode 



(ConHandte) ' 
HCI Command Status event 



(Status, Num_Cmd, 
Cmd_OpCode) 



/* A=Master */ 



:: Sub-scehaHojiil : Master unparks; Slave 

: U 



LMP_unpark,BD_ADDR_feq ^ 



{timin9_controLflags, D_b, BD.ADDR, ..) 
^ LMP,accepted (opcode) 



/' A=Master */ 



r B=Slave V 



r to all slaves */ 



r only from this slave V 



:;:Sub^enaiio; 2; ; Master unparks Slave;: 
V : .using • PMi ApbR-:;: :. ■: 



LMP_unpark_PM,ADDR_req 



(timin^contnoLflags, D_b, BD.ADDR, ..) 
^ LMP_accepted (opcode) 



/* A=Slave V 



/• B=Slave */ 



rtoall slaves '/ 



r only from this slave V 



piSubirSceniari^ 



'Acc ess_Request_Message" (ID-Piacket) ^ 



HCI Mode Change even^ 



r BsMaster V 



LMP_unpari(_BD_ADDR/PM_ADp R_req 



(timing_control_flags, D_b, ..) 
LMP_accepted (opcode) 



(Statu5=OxOO, ConHandle. COrrent.ModesActive, ..) 




Host-B 




HCI Mode Change event 



(Status=OxOO. ConHandle, CunBnt_Mod©a Active, ..)' 



Figure 6,4: Exit Park Mode 
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7 BUFFER MANAGEMENT, FLOW CONTROL 



The HC Data buffers are configured by the HC and managed by the Host, On 
initialization, the Host will issue HCI_Read_Buffer_Size. This specifies the 
maximum allowed length of HCI data packets sent from the Host to the HC, 
and the maximum number of ACL and SCO data packets that the HC can store 
in its buffer. After a connection is created, HC will frequently inform the Host 
about the number of sent packets using Number Of Completed Packets event 
(Number_of_Handles, Connection_Handle[l], HC_Num_Of_ 
Completed_Packets[i]) (see Figure 7.1 Host-to-HC flow control), 



Host-A ■ HC/LM-A ■ 



; Initiaiisatipt> ;. - . , :;: 




HCLReacl_Buffer_Size () ^ 



, HCI Command Complete event 



IStatus, ACL_Data_P&cke*_Ler^ ..) 




Host-B 



: ACL: and/or iSCO;:^C6^ 



HCI-ACL or HCI^CO data 



Baseband data packets 



^ HCI Number Of Completed Packeb event 
^(Num_of_HandIes,CcnHandIe[iJ...) ' 



HCI-ACL or HCI-SCO data packete^ 



Figure 7. 1: Host to HC flow control 



Accordingly the HC to Host flow control can be applied in the same way so that 
during initialization the Host configures the Buffer Size and later the Host Con- 
troller will manage the Host Buffers. 
Using HCLSet_Host_Controller_To_Host_Flow_Control 
(Flow_ControL Enable) the Host can decide to apply the HC to Host flow 
control or not. For flow control itself HCLHost_Buffer_Size 
(Host_ACL_Data_Packet_Length, Host_SCO_Data_Packet_Length, 
Host_TotaLNum_ACL_Data_ Packets, Host_TotaLNum_SCO_Data_Packets) 
and HCLHost_Number_Of_Completed_Packets (Number_of_Handles, 
Connection_Handle[l], Host_Num_Of_Completed_Packets[l]) will be used (for 
details see Figure 7.2 HC to Host Flow Control). 
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Bluetooth. 



Host-A 




HC/LM-A 




ilriitiajisatioh!- 



Ha_SeLH o5t,Controaef_To_Host_Flow„Control 
' {Rofw_Control_Enable=ON) 

. HQ Commaid Complete event 



(Num_Cmd, Cmd.OpCode, Stahjs) 
HCI_Host_Buffer_Size 



(Host.AO^Data.Pactet^Length. ..) ' 

^Ha Command Complete event 
^ (Num_Ond, Cmd.OpCode, 
Status) 




HC/LM-B 



Host-B 




HCkACL or HC^-SCO data packets 



Ha,H ost_NLjmbef.Of_Completed_Packets ^ 



(Num_of_Handles, ConHandle[i]. „)' 



^ Baseband data packets 



, HC^ACL or HO-SCO data 



Figure 7.2: HC to Host Flow Control 



Buffer management, flow control 
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8 LOOPBACKMODE 



8.1 LOCAL LOOPBACK MODE 

The local Loopback Mode is used to loopback received HCI Commands, and 
HCI ACL and HCI SCO packets sent from the Host, 

The HC will send four Connection Complete events (one for ACL, three for 
SCO Connections) so that the Host can use the Connection_Handles to re- 
send HCI ACL and HCI SCO Packet to HC, To exit the local Loopback Mode. 
HCI_Write_Loopback_Mode (Loopback_Mode=OxOO) or HCLReset ( ) will be 
used. 
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Bluetooth. 



H St 




Eiiter Local: Loopback Mode:. 




HCLWrite,Loopback_Mode 



{Loopback_Mode=local loopback) 
HCI Connection Complete event 



TStatus, ACL.ConHandle, BD_ADDR, Link_Type=ACL. Encr.Mode) 
HCI Connection Complete event 



(Status, SCO_ConHandle1. BD_ADDR, Link_Type=SCO, Encr_Mode) 
g HCI Connection Complete event 



'(Status, SCO_ConHandle2, BD.ADDR, Unk_Type=SCO. Encr_Mode) 
HCI Connection Complete event 



(Status, SCO_ConHandIe3, BD.ADDR, Link_Type=SCO, Ena.Mode) 
g HCI Command Complete event 



(Num_Cmd, Cmd_OpCode=HCLWrite_Loopback, Status) 



Sub-scenario ;1::|(^ 



HCI-ACL. HCI-SCO packets 



HCI-ACL. HCI^CO packets .. 



f* loopback a)) received 
HCI-ACL and HCI-SCO 
packets 7 



Su b-sdehiario 2: (oopbjack; HCI Commarvd ; ■ ; ; • 





HCI-Command packets 






< 


HCI Loopback Command event 


► 


r Special commands like 
HCLBuffer.Size ..will not 
be looped back V 




(HCI_Command_Packet) 





: Exit Local Loopback M6^ 



HCLWrtte_Loopback_Mode 



(Loopback_Mode=no toopback) 
HCI Disconnection Complete event 



(Status=OxOO. SCO_ConHandle1 , Reason) 
HCI Disconnection Complete event 



{Status=:OxOO. SCO_ConHandle2, Reason) 
HCI Disconnection Complete event 



(Status=OxOO, SCO_ConHandIe3, Reason) 
HCI Disconnection Complete event 



(Status=OxOO, ACL.ConHandle, Reason) 
HCI Command Complete event 



(Num.Cmd, Cmd_OpCode=HCl_Write_LoopbacK_Mode, Status) 



Figure 8. 1: Local Loopback Mode 



Loopback Mode 
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8.2 REMOTE LOOPBACK MODE 



Bluetooth. 



The remote Loopback Mode is used to loopback all received Baseband ACL 
and SCO Data received from a remote BT Device. During remote Loopback 
Mode. ACL and SCO Connection can be created. The remote Loopback Mode 
can be released with the command HCLWrite_Loopback_Mode 
(Loopback_Mode=OxOO). 







Enter iRemote; Loopback f^e; 



HCI_Wrtte_Loopback_Mocle 



(Loopbad(.ModeRBmote loopback) 
^HCI Command Complete event 



(Num_Cmd, Cmd_OpCode, 
Status) 



Create ACL C6nnec)ton 



Create SCQComecttons: 



^ Baseband ACL-, SCO-Packets 


^ HCI-ACL, HCI-SCO packets .. 


HCI-ACL, HCI-SCO packets ^ 


Baseband ACL-, SCO-Packets ^ 







; Exit F^mote'Loopback Mode 



r RerTK)ve^ SGQ iCofihectio 



Remove; ACL Gdnrie^etiori;; 



HCLWrite,Loopback,Mod9 
(Loopback_Modesno loopback) 



HCI Command Complete event 
(Num_Cmd, Cmd_OpCode, 
Status) 




Figure 8.2: Remote Loopback Mode 
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9 LIST OF ACRONYMS AND ABBREVIATIONS 







HC 


Host Controller 






LAP 


Lower Address Part 






LM 


Link Manager 






MSC 


Message Sequence Chart 







Ust of Acronyms and Abbrevfatbns 29 November 1 999 



1073 



BLUETOOTH SPECIFICATION Version 1 .0 B page 1 074 of 1082 



Message Sequence Charts BlUStOOth 

10 LIST OF FIGURES 



Figure 2.1 : Remote Name Request 1039 

Figure 2.2: One-Time Inquiry 1040 

Figure 2.3: Periodic Inquiry 1041 

Figure 3.1 : Overview of ACL Connection establishment 

and detachment 1042 

Figure 3.2: ACL Connection Request phase 1044 

Figure 3.3: ACL Connection setup with pairing.. 1046 

Figure 3.4: ACL Connection setup with authentication 1047 

Figure 3.5: Encryption and Setup complete 1 048 

Figure 3.6: ACL Disconnection , 1049 

Figure 4.1: Authentication Requested 1050 

Figure 4.2: Set Connection Encryption 1052 

Figure 4.3: Change Connection Link Key 1053 

Figure 4.4: Master Link Key ,,.1054 

Figure 4,5: Read Remote Supported Features 1055 

Figure 4.6: Read Clock Offset 1056 

Figure 4.7: Read Remote Version Information 1 056 

-Figure 4.8: QoS Setup 1057 

Figure 4.9: Switch Role 1058 

Figure 5.1 : SCO Connection setup (activated from master) 1059 

Figure 5.2: SCO Connection setup (activated from slave). 1060 

Figure 5.3: SCO Disconnection 1061 

Figure 6.1 : Sniff Mode 1063 

Figure 6.2: Hold Mode 1064 

Figure 6.3: Enter Park Mode..,.. 1066 

Figure 6.4: Exit Park Mode 1067 

Figure 7.1 : Host to HC flow control 1068 

Figure 7.2: HC to Host Flow Control 1069 

Figure 8.1: Local Loopback Mode .,..1071 

Figure 8.2: Remote Loopback Mode 1072 



1074 



29 November 1999 



List of Figures 



BLUETOOTH SPECIFICATION Version 1.0 B page 1075 of 1082 

Message Sequence Charts BIU6t00th 

11 LIST OF TABLES 

Table 6.1: Summary of modes (Sniff, Hold, Park) 1062 



Ust of Tables 



29 November 1999 



1075 



BLUETOOTH SPECIFICATION Version 1.0 B page 1 076 of 1 082 

Message Sequence Charts BlUBtOOtH 

12 REFERENCES 

[1] "Baseband Specification" on page 33 

[2] "Link Manager Protocol" on page 185 

[3] "Host Controller Interface Functional Specification" on page 517 

[4] "Logical Link Control and Adaptation Protocol Specification" on page 245 



1076 



29 November 1999 



References 



BLUETOOTH SPECIFICATION Version 1.0 B 



Alphabetical Ind x 



Numerics 

0x7E [H:3] 784 

A 

Abort- [F:2] 420 

ACCESS RIGHTS ACCEPT [F:3] 451 
ACCESS RIGHTS REJECT [F:3] 451 
ACCESS RIGHTS REQUEST [F:3] 451 
Ack Code [H:3] 781 
Ack code[H:3] 780 

Acknowledgement Timer (T1) [F:1] 400 
ALERTING [F:3] 442 
asynchronous notifications [F:4] 508 
AT+CMUX[F:1] 399 
authentication [C] 194 

B 

basic option [F:1] 396, [F:1] 398 

Baud Rate[H:3] 781 

baud rate [F:1J 391, [H:3J 780 

beacon [C]211 

beginning delimiter [H:3] 785 

Bluetooth [F:2]414 

BOF(0x7E) [H:3] 786 

Briefcase Trick [F:4] 500 

business card [F:2] 415 

byte ordering [F:1] 390 

byte stream [F:2] 421 

C 

Call Control [F:3] 435 

CALL PROCEEDING [F:3] 441 

Calling Line Identity [F:3] 456 

checksum [H:3] 785 

CL INFO [F:3] 455 

claimant [C] 194 

clock offset [C] 202 

COBS [H;3] 784, [H:3J 785, 1H:3] 787 

COBS code block [H:3] 787 

COBS code byte [H;3] 787 

combination key[C] 197 

commands In TS 07.10 [F:1] 396 

Configuration distribution (F:3] 449 

CONNECT [F:3J442 

Connect-request(F:2J 418 

Consistent Overhead Byte Stuffing [H:3] 785 



page 1077 of 1082 



Bluetooth. 



control channel [F:1] 396 
convergence layer IF:1] 397 
CRC [H:3] 782 

CRC-CCITT [H:3] 785, [H:3] 786 
CTS [H:3J 788 
current link key [C] 198 

D 

Data Link Connection Identifier [F:l] 393 

data throughput [F:1] 391 

DCE [F: 1)391 

default URL [F:4J 509 

delayed loopback[l:1] 812 

Delimiter [H:3]782 

delimiter 0x7E [H:3] 785 

delimiter, 0x7E [H:3J 784 

direction bit [F:1]400 

DISC command IF:1] 400, [F:1J 401 

DISC command frame [F:1] 399 

DISCONNECT [F:3] 446 

DIsconnect-request [F:2] 419 

DNS [F:4] 503 

drift [C] 203 

DTE [F:1]391,[F:1] 399 

DTMF ACKNOWLEDGE [F:3] 457 

DTMF start & stop [F:3] 456 

DTR/DSR[F:1]403 

E 

EIATIA-232-E IF:1] 389, [F:1] 391 

eliminating zeros [H:3] 785 

emergency call [F:3J 479 

emulated ports [F: 1 ] 393 

encryption [C] 199 

ending delimiter (H:3J 785 

EOF(0x7E) [H:3] 786 

Error detection [H:3J 780 

error message packet [H:3] 785, [H:3] 789 

Error Message Packet (0x05) (H:3] 779 

enror packet [H:3] 788 

En^or Recovery [H:3] 783 

error recovery [H:3] 780, [H:3J 784 

en-or recovery procedure [H:3] 785, [H:3] 788 

Error Type [H:3] 786, [H:3] 789 

ETSI TS 07.10 [F:2] 421 

external call [F:3] 479 



29 November 1999 



1077 



BLUETOOTH SPECIFICATION Version 1.0 B 



page 1078 of 1082 



Confidential Bluetooth 
F 

Fast inter member access [F:3] 449 

FCoff[F:1]403 

FConlF:1]403 

flow control [F:1]403 

Forbidden l\^essage [F:4] 501 

frame types [F:1J 396 

G 

generator polynomial [H:3] 785 
Get-request [F:2] 420 
Group Management [F:3] 435 

H 

HCI RS232 Transport Layer [H:3J 778 

header ID [F:2] 417 

hold mode [C] 208 

Host Controller Interface [F:4] 508 

HTML[F:4] 505 

HTTP [F:4] 503, [F:4] 505 

I 

in-band tones/announcements [F:3] 443 
INFO ACCEPT [F:3] 452 
INFO SUGGEST (F:3] 452 
INFORMATION [F:3] 441 
initialisation key[C] 195 
intercom call [F:3J 479 

Internet Engineering Task Force (IETF) [F:4] 
504 

Interoperability (F:4] 511 
interrupt latency [H:3J 780 
lrCOMM[F:2]416 
IrDA [F:2]414 
IrMC [F:2] 425 
IrOBEX [F:2] 414 

J 

JavaScript [F:4] 505 
jitter [C] 203 

L 

L2CAP channel [F:1J407 
latency requirements [F:1] 407 
link key [C] 194 

link loss notification [F:l] 399, [F:1] 407 
link supervision [C] 224 
LISTEN REJECT [F:3]454 
LISTEN REQUEST [F:3] 453 
LISTEN SUGGEST [F:3] 453 



Bluetooth. 

loop back test [i:1] 815 
low power mode [F:1] 407 

M 

Management Entity [F:4] 508 
Maximum Frame Size (N1) [F:1] 400 
Modem Status Command [F:1] 397 
multiple bearers [F:4] 508 
multiplexer control channel [F:1] 399 
Multiplexer Control commands [F:1] 401 

N 

name request [C] 207 

negotiation packet [H:3] 780, [H:3] 781 

Negotiation Packet (0x06) [H:3] 779 

negotiation phase [H:3] 780 

null modem [F:1] 392 

null modem emulation [F:1] 391 

number of data bit [H:3] 780 

number of stop bit [H:3] 780 

O 

OBEX [F:2J 414 

OBEX session protocol [F:2j 417 
Obtain access rights [F:3] 449 
output power [C] 215 

P 

paging scheme [C] 223 
pairing [C] 195 
parity type [H:3] 780 
park mode[C] 211 
payload heade [C] 192 
PIN[C] 195 

PN command [F:1] 402 
port emulation entity [F:1] 405 
port proxy entity [F:1] 405 
Protocol Mode[H:3] 782 
protocol mode [H:3] 780 
protocol mode 0x1 3 [H:3] 785 
protocol mode 0x14 [H:3] 788 
Proxy/gateway Addressing [F:4] 509 
Put-request [F:2]419 

Q 

Q.931 [F:3] 435 

Quality of Service [C] 218 

R 

register recall [F:3] 456 



1078 



29 November 1 999 



BLUETOOTH SPECIFICATION Version 1.0 B 



page 1079 of 1082 



RELEASE [F:3] 446 

RELEASE COMPLETE [F:3] 446 

reliability [F: 1)407 

reliable transmission [F:1] 400 

Response Timer for Multiplexer Control Chan- 
nel (T2) [F:1]400 

resynchronization [H:3] 784 

resynchronize [H:3] 788 

retransmission holding buffer [H:3] 785, (H:3] 
788 

retransmission packets [H:3] 785, [H:3] 788 
RFCOMM [F:2]414 
RFCOMM entity [F:1] 393 
RFCOMM multiplexer [F:1] 399 
RFCOMM reference model [F:1] 395 
RFCOMM Server Channel [F:1] 405 
RFCOMM server channels [F:1] 393, [F:1] 400 
RFCOMM session [F:1] 393, [F:1] 399 
RLS command [F:1]402 
RPN command [F:1]401 
RS-232 [F:1] 389, [F:1] 391, [F:1] 405 
RS232 [H:3J 778 

RS-232 control signals [F:1] 392, [F;1] 397 
RS232 Transport Packet [H:3] 779 
RSSI[CJ215 
RTS IH:3] 788 

RTS/CTS (F:1] 403, [H:3] 780 
RTS/CTS Mode (H:3] 782 

s 

SABM command [F:1] 399, [F:1] 400 
SCO link [C] 219 

semi-penmanent link key [CJ 198, [C] 199 

SEQ No with Error [H:3] 785 

sequence number [H:3] 779 

sequence number field [H:3] 785, [H:3] 788 

Sequence Numtrer with Enor field [H:3] 785, 
[H:3J 788 

serial port emulation entity [F:1J 395 
service call [F:3] 479 

Service Discovery Protocol [F:4] 506, [F:4] 512 
service records (F:1] 405 
SetPath- [F:2] 420 
SETUP [F:3] 439 

SETUP ACKNOWLEDGE [F:3] 441 

simple enror recovery scheme [H:3J 788 

Smart Kiosk [F:4] 501 

sniff mode [C] 209 

SSL[F:4] 505 

START DTMF [F:3] 457 



Bluetooth. 

START DTMF REJECT [F:3]457 
STOP DTMF [F:3] 457 
STOP DTMF ACKNOWLEDGE [F:3] 457 
supervision timeout [C] 224 
synchronization [H:3] 785 
synchronize (H:3] 788 

T 

TCP [F:4J 505 
TCP port number [F:2] 423 
TCP/IP [F:2] 414 
TCS Binary (F:3] 435 
Tdetect(H:3]780 
Tdetect Time [H:3] 782 
Tdetecttime[H:31 788 
temporary link key [C] 198 
test mode [C] 237, [1:1] 806 
Tiny TP tF:2]416 
transmitter test [1:1] 811 
TS 07.10 [F:1] 389 

TS 07.1 0 multiplexer [F:1] 393, [F:1] 407 
U 

UART [H:3] 780 

UART Settings [H:3] 781 

UDP [F:41 504 

Unifomn Resource Locators [F:4] 509 

unit key [C] 197 

URL [F:4] 507 

User Addressing [F:4] 509 

V 

vCalendar [F:2]415 
vCard [F:2]415 
verifier [C] 194 
vMessage [F:2]415 
vNotes [F:2]415 

W 

WAP Client [F:4] 502 
WAP Proxy/gateway [F:4J 503 
WAP Server [F:4] 503 
WDP [F:4] 504 

Wireless User Group [F:3] 449 
WSP [F:4J 504 
WTLS [F:4J 504 
WTP [F:4] 504 
WUG [F:3] 449 



29 November 1999 



1079 



BLUETOOTH SPECIFICATION Version 1.0 B 



page 1080 of 1082 



Confidential Bluetooth 
X 

XML [F:4] 505 
XON/XOFF[F:1J403 

z 

zero elimination [H:3] 787 



Bluetooth. 



1080 



29 November 1 999 



&9 



